neubert's user avatar
neubert's user avatar
neubert's user avatar
neubert
  • Member for 10 years, 3 months
  • Last seen more than a month ago
17 votes
5 answers
3k views

Creating a small number from a random octet string

16 votes
2 answers
2k views

How did || come to be used in crypto texts to represent concatenation?

10 votes
1 answer
551 views

how does BearSSL's GCM modular reduction work?

10 votes
1 answer
1k views

Why did OAEP change from PKCS#1 v2.0 and v2.1?

9 votes
3 answers
5k views

Why does OpenSSL differentiate between PSS and non-PSS for private key generation?

9 votes
0 answers
228 views

GCM with reversed poly

8 votes
1 answer
705 views

preferred method for generating k for DSA / ECDSA

7 votes
1 answer
17k views

ECDSA private key format

7 votes
1 answer
905 views

Can non-assembly crypto libraries truly be secure against timing attacks?

7 votes
1 answer
2k views

Ed25519 PKCS8 private key example from IETF draft seems malformed

7 votes
1 answer
598 views

Replacing Curve25519 with Ristretto255

6 votes
1 answer
3k views

Transforming SHA-512 into SHA-512/256?

5 votes
1 answer
324 views

How exploitable are cache timing attacks?

5 votes
1 answer
365 views

Aside from DES, has the NSA ever strengthened algorithms?

5 votes
1 answer
697 views

Why doesn't the GCM spec use a more efficient multiplication algorithm?

4 votes
1 answer
1k views

ECDH for more than two parties

4 votes
1 answer
137 views

questions about modular reduction algorithm over $F_{2^m}$

4 votes
1 answer
263 views

representing binary finite fields in ASN.1

4 votes
1 answer
802 views

What is tiger192,4 in PHP?

3 votes
1 answer
246 views

simulating rc4-256 with rc4-128

3 votes
1 answer
285 views

Why does FIPS 186-4 seem to have an excessively complex q generation?

3 votes
1 answer
968 views

ECDSA where the group order is larger than the hash size?

3 votes
1 answer
529 views

why was padding changed when keccak became sha3?

3 votes
1 answer
436 views

Representations of secret keys on Curve25519

2 votes
2 answers
973 views

Salsa20 / ChaCha with 128 bit keys

2 votes
0 answers
201 views

where are ssh.com's crypticore and seed defined?

2 votes
1 answer
59 views

consequences of using fixed values with OAEP

2 votes
1 answer
93 views

CAs are pre-loaded on the system, but how is it able to get intermediate certs?

2 votes
1 answer
227 views

do koblitz curves over $\mathbb{F}_{P}$ as generalized in SEC2 always have $a$ as 0?

2 votes
1 answer
156 views

emulating AES GCM with AES CTR