User knaccc

17 votes

1 answer

3k views

After ECDH with Curve25519, is it pointless to use anything stronger than AES-128?

asked Jun 3, 2018 at 22:00

8 votes

1 answer

302 views

Bob has an EC key pair. How can he receive a small integer in the least compute intensive way?

elliptic-curves diffie-hellman

asked Feb 13, 2017 at 2:19

8 votes

2 answers

3k views

Why are NaCl secret keys 64 bytes for signing, but 32 bytes for box?

elliptic-curves ed25519

asked Dec 31, 2017 at 10:20

5 votes

1 answer

177 views

Can elliptic curve point common factors be detected?

elliptic-curves trapdoor

asked Feb 17, 2017 at 4:30

5 votes

2 answers

179 views

EC: How to prevent discovery of base point after commutative operation

elliptic-curves trapdoor

asked Feb 9, 2017 at 18:13

5 votes

1 answer

216 views

HKDF randomness extraction - salt or no salt?

hash diffie-hellman hmac random-oracle-model hkdf

asked Jan 6 at 2:08

4 votes

2 answers

859 views

Is it safe to generate two 256-bit ECC keys from 128 bits of entropy?

elliptic-curves entropy

asked Mar 16, 2018 at 17:10

4 votes

1 answer

980 views

How to use a random 32 byte sequence as a curve25519 public key

elliptic-curves

asked Sep 22, 2017 at 8:40

3 votes

1 answer

222 views

Why do curve25519 implementations only have ge_frombytes_negate_vartime, and not a regular ge_frombytes method?

elliptic-curves

asked Sep 23, 2017 at 13:46

3 votes

0 answers

87 views

Which safe elliptic curves allow for the fastest scalar multiplication

elliptic-curves

asked Sep 14, 2017 at 6:43

3 votes

2 answers

253 views

How to prove that two EC public keys created with two different generators share the same secret key?

elliptic-curves

asked May 16, 2018 at 15:34

3 votes

2 answers

139 views

How to efficiently find the distance between two EC point private keys

elliptic-curves

asked Feb 13 at 4:46

2 votes

1 answer

71 views

Are the following asymmetric encryption schemes equivalent?

encryption elliptic-curves signature protocol-analysis ecies

asked Oct 2, 2018 at 2:22

2 votes

1 answer

1k views

How to convert from curve25519 33 byte to 32 byte representation

elliptic-curves

asked Sep 21, 2017 at 20:48

1 vote

3 answers

1k views

How to deterministically generate a 256 bit ECC key from 128 bits of entropy without a CSPRNG

elliptic-curves random-number-generator entropy

asked Mar 18, 2018 at 11:27

1 vote

1 answer

785 views

How many points are there on the X25519 curves?

elliptic-curves ed25519

asked Jun 22, 2018 at 14:01

1 vote

1 answer

239 views

Why is SHA384 used in TLS cipher suites for AES_256_GCM instead of SHA256?

hash tls mac hkdf

asked Jan 21 at 23:03

1 vote

0 answers

33 views

Is partial computation of an Ed25519 Diffie-Hellman shared secret possible?

elliptic-curves ed25519 x25519

asked Jan 29 at 18:47

1 vote

1 answer

84 views

Would discrete-log-based signing and encryption have been a better choice than RSA?

rsa discrete-logarithm schnorr-signature

asked Jan 4 at 15:27

1 vote

1 answer

119 views

How to most inexpensively extract 1 byte of uniformly distributed entropy from a 32-byte Curve25519 EC point

hash x25519

asked Jan 31 at 16:16

1 vote

1 answer

36 views

Necessary Schnorr signature non-interactive challenge bindings

schnorr-signature

asked Mar 10 at 18:33

0 votes

1 answer

906 views

Reasoning about WebCrypto ECDSA choices: P-256/384/521, SHA-1/256/384/512?

elliptic-curves signature

asked Jun 12, 2019 at 0:27

0 votes

1 answer

66 views

What is the term to describe the combination of ciphertext, IV and authentication tag?

encryption authenticated-encryption terminology aes-gcm

asked Aug 9, 2021 at 17:36

0 votes

0 answers

36 views

Consequences of leaking one byte of an ECDH shared secret

elliptic-curves diffie-hellman ed25519

asked Jan 29 at 19:19

0 votes

1 answer

343 views

Can TweetNaCl box sender's private key be set to "1" without privacy loss?

encryption diffie-hellman

asked May 4, 2017 at 1:17

Stack Exchange Network

current community

your communities

more stack exchange communities

25 Questions

After ECDH with Curve25519, is it pointless to use anything stronger than AES-128?

Bob has an EC key pair. How can he receive a small integer in the least compute intensive way?

Why are NaCl secret keys 64 bytes for signing, but 32 bytes for box?

Can elliptic curve point common factors be detected?

EC: How to prevent discovery of base point after commutative operation

HKDF randomness extraction - salt or no salt?

Is it safe to generate two 256-bit ECC keys from 128 bits of entropy?

How to use a random 32 byte sequence as a curve25519 public key

Why do curve25519 implementations only have ge_frombytes_negate_vartime, and not a regular ge_frombytes method?

Which safe elliptic curves allow for the fastest scalar multiplication

How to prove that two EC public keys created with two different generators share the same secret key?

How to efficiently find the distance between two EC point private keys

Are the following asymmetric encryption schemes equivalent?

How to convert from curve25519 33 byte to 32 byte representation

How to deterministically generate a 256 bit ECC key from 128 bits of entropy without a CSPRNG

How many points are there on the X25519 curves?

Why is SHA384 used in TLS cipher suites for AES_256_GCM instead of SHA256?

Is partial computation of an Ed25519 Diffie-Hellman shared secret possible?

Would discrete-log-based signing and encryption have been a better choice than RSA?

How to most inexpensively extract 1 byte of uniformly distributed entropy from a 32-byte Curve25519 EC point

Necessary Schnorr signature non-interactive challenge bindings

Reasoning about WebCrypto ECDSA choices: P-256/384/521, SHA-1/256/384/512?

What is the term to describe the combination of ciphertext, IV and authentication tag?

Consequences of leaking one byte of an ECDH shared secret

Can TweetNaCl box sender's private key be set to "1" without privacy loss?