knaccc's user avatar
knaccc's user avatar
knaccc's user avatar
knaccc
  • Member for 7 years
  • Last seen this week
18 votes
1 answer
4k views

After ECDH with Curve25519, is it pointless to use anything stronger than AES-128?

11 votes
2 answers
5k views

Why are NaCl secret keys 64 bytes for signing, but 32 bytes for box?

8 votes
1 answer
322 views

Bob has an EC key pair. How can he receive a small integer in the least compute intensive way?

6 votes
1 answer
850 views

HKDF randomness extraction - salt or no salt?

5 votes
1 answer
212 views

Can elliptic curve point common factors be detected?

5 votes
2 answers
185 views

EC: How to prevent discovery of base point after commutative operation

4 votes
2 answers
1k views

Is it safe to generate two 256-bit ECC keys from 128 bits of entropy?

4 votes
1 answer
1k views

How to use a random 32 byte sequence as a curve25519 public key

3 votes
1 answer
264 views

Why do curve25519 implementations only have ge_frombytes_negate_vartime, and not a regular ge_frombytes method?

3 votes
0 answers
98 views

Which safe elliptic curves allow for the fastest scalar multiplication

3 votes
1 answer
982 views

How many points are there on the X25519 curves?

3 votes
2 answers
307 views

How to prove that two EC public keys created with two different generators share the same secret key?

3 votes
2 answers
398 views

How to efficiently find the distance between two EC point private keys

2 votes
1 answer
213 views

Discovery of Ed25519 128-bit private key where a KDF has not been used

2 votes
1 answer
103 views

Security level of the hash of the sum of two uniformly random keys

2 votes
1 answer
73 views

Are the following asymmetric encryption schemes equivalent?

2 votes
1 answer
2k views

Why is SHA384 used in TLS cipher suites for AES_256_GCM instead of SHA256?

2 votes
1 answer
2k views

How to convert from curve25519 33 byte to 32 byte representation

1 vote
3 answers
1k views

How to deterministically generate a 256 bit ECC key from 128 bits of entropy without a CSPRNG

1 vote
0 answers
45 views

Is partial computation of an Ed25519 Diffie-Hellman shared secret possible?

1 vote
1 answer
139 views

How to most inexpensively extract 1 byte of uniformly distributed entropy from a 32-byte Curve25519 EC point

1 vote
1 answer
109 views

Would discrete-log-based signing and encryption have been a better choice than RSA?

1 vote
1 answer
56 views

Necessary Schnorr signature non-interactive challenge bindings

0 votes
1 answer
2k views

Reasoning about WebCrypto ECDSA choices: P-256/384/521, SHA-1/256/384/512?

0 votes
1 answer
133 views

What is the term to describe the combination of ciphertext, IV and authentication tag?

0 votes
1 answer
407 views

Can TweetNaCl box sender's private key be set to "1" without privacy loss?