User neubert

17 votes

5 answers

3k views

Creating a small number from a random octet string

asked Dec 15, 2012 at 16:48

16 votes

2 answers

2k views

How did || come to be used in crypto texts to represent concatenation?

asked Dec 24, 2018 at 4:15

10 votes

1 answer

551 views

how does BearSSL's GCM modular reduction work?

asked Jan 13, 2019 at 2:06

10 votes

1 answer

1k views

Why did OAEP change from PKCS#1 v2.0 and v2.1?

asked Sep 16, 2016 at 16:23

9 votes

3 answers

5k views

Why does OpenSSL differentiate between PSS and non-PSS for private key generation?

asked May 9, 2019 at 1:50

9 votes

0 answers

228 views

GCM with reversed poly

asked Jan 8, 2019 at 13:28

8 votes

1 answer

705 views

preferred method for generating k for DSA / ECDSA

asked Dec 25, 2016 at 22:07

7 votes

1 answer

17k views

ECDSA private key format

asked Jun 29, 2017 at 4:11

7 votes

1 answer

905 views

Can non-assembly crypto libraries truly be secure against timing attacks?

asked Aug 2, 2015 at 3:29

7 votes

1 answer

2k views

Ed25519 PKCS8 private key example from IETF draft seems malformed

asked Jun 7, 2018 at 11:14

7 votes

1 answer

598 views

Replacing Curve25519 with Ristretto255

asked Aug 5, 2022 at 22:52

6 votes

1 answer

3k views

Transforming SHA-512 into SHA-512/256?

asked Dec 21, 2015 at 0:31

5 votes

1 answer

324 views

How exploitable are cache timing attacks?

asked Mar 12, 2016 at 15:09

5 votes

1 answer

365 views

Aside from DES, has the NSA ever strengthened algorithms?

asked Jul 17, 2018 at 2:45

5 votes

1 answer

697 views

Why doesn't the GCM spec use a more efficient multiplication algorithm?

asked Dec 19, 2018 at 4:25

4 votes

1 answer

1k views

ECDH for more than two parties

asked Jul 27, 2019 at 21:35

4 votes

1 answer

137 views

questions about modular reduction algorithm over $F_{2^m}$

asked Sep 9, 2018 at 20:13

4 votes

1 answer

263 views

representing binary finite fields in ASN.1

asked Jul 4, 2017 at 19:12

4 votes

1 answer

802 views

What is tiger192,4 in PHP?

asked Sep 6, 2015 at 5:07

3 votes

1 answer

246 views

simulating rc4-256 with rc4-128

asked Nov 25, 2014 at 2:13

3 votes

1 answer

285 views

Why does FIPS 186-4 seem to have an excessively complex q generation?

asked Jul 28, 2016 at 5:32

3 votes

1 answer

968 views

ECDSA where the group order is larger than the hash size?

asked Sep 30, 2018 at 23:16

3 votes

1 answer

529 views

why was padding changed when keccak became sha3?

asked Jul 17, 2018 at 2:40

3 votes

1 answer

436 views

Representations of secret keys on Curve25519

asked Jul 16, 2019 at 13:42

2 votes

2 answers

973 views

Salsa20 / ChaCha with 128 bit keys

asked Jan 23, 2019 at 22:13

2 votes

0 answers

201 views

where are ssh.com's crypticore and seed defined?

asked Feb 20, 2020 at 12:41

2 votes

1 answer

59 views

consequences of using fixed values with OAEP

asked Jun 8, 2019 at 23:57

2 votes

1 answer

93 views

CAs are pre-loaded on the system, but how is it able to get intermediate certs?

asked Feb 26, 2018 at 17:17

2 votes

1 answer

227 views

do koblitz curves over $\mathbb{F}_{P}$ as generalized in SEC2 always have $a$ as 0?

asked Mar 24, 2018 at 19:51

2 votes

1 answer

156 views

emulating AES GCM with AES CTR

asked Dec 3, 2018 at 8:27

Stack Exchange Network

73 Questions

Creating a small number from a random octet string

How did || come to be used in crypto texts to represent concatenation?

how does BearSSL's GCM modular reduction work?

Why did OAEP change from PKCS#1 v2.0 and v2.1?

Why does OpenSSL differentiate between PSS and non-PSS for private key generation?

GCM with reversed poly

preferred method for generating k for DSA / ECDSA

ECDSA private key format

Can non-assembly crypto libraries truly be secure against timing attacks?

Ed25519 PKCS8 private key example from IETF draft seems malformed

Replacing Curve25519 with Ristretto255

Transforming SHA-512 into SHA-512/256?

How exploitable are cache timing attacks?

Aside from DES, has the NSA ever strengthened algorithms?

Why doesn't the GCM spec use a more efficient multiplication algorithm?

ECDH for more than two parties

questions about modular reduction algorithm over $F_{2^m}$

representing binary finite fields in ASN.1

What is tiger192,4 in PHP?

simulating rc4-256 with rc4-128

Why does FIPS 186-4 seem to have an excessively complex q generation?

ECDSA where the group order is larger than the hash size?

why was padding changed when keccak became sha3?

Representations of secret keys on Curve25519

Salsa20 / ChaCha with 128 bit keys

where are ssh.com's crypticore and seed defined?

consequences of using fixed values with OAEP

CAs are pre-loaded on the system, but how is it able to get intermediate certs?

do koblitz curves over $\mathbb{F}_{P}$ as generalized in SEC2 always have $a$ as 0?

emulating AES GCM with AES CTR