user avatar
user avatar
user avatar
neubert
  • Member for 9 years, 6 months
  • Last seen this week
17 votes
5 answers
3k views

Creating a small number from a random octet string

16 votes
2 answers
2k views

How did || come to be used in crypto texts to represent concatenation?

10 votes
1 answer
489 views

how does BearSSL's GCM modular reduction work?

9 votes
1 answer
1k views

why did oaep change from pkcs1 v2.0 and v2.1?

8 votes
0 answers
194 views

GCM with reversed poly

7 votes
3 answers
4k views

Why does OpenSSL differentiate between PSS and non-PSS for private key generation?

7 votes
1 answer
1k views

Ed25519 PKCS8 private key example from IETF draft seems malformed

7 votes
1 answer
668 views

preferred method for generating k for DSA / ECDSA

7 votes
1 answer
14k views

ECDSA private key format

7 votes
1 answer
881 views

Can non-assembly crypto libraries truly be secure against timing attacks?

6 votes
1 answer
3k views

Transforming SHA-512 into SHA-512/256?

5 votes
1 answer
315 views

How exploitable are cache timing attacks?

5 votes
1 answer
313 views

Aside from DES, has the NSA ever strengthened algorithms?

5 votes
1 answer
657 views

Why doesn't the GCM spec use a more efficient multiplication algorithm?

4 votes
1 answer
131 views

questions about modular reduction algorithm over $F_{2^m}$

4 votes
1 answer
247 views

representing binary finite fields in ASN.1

4 votes
1 answer
766 views

What is tiger192,4 in PHP?

3 votes
1 answer
236 views

simulating rc4-256 with rc4-128

3 votes
1 answer
252 views

Why does FIPS 186-4 seem to have an excessively complex q generation?

3 votes
1 answer
452 views

why was padding changed when keccak became sha3?

3 votes
1 answer
382 views

Representations of secret keys on Curve25519

2 votes
1 answer
892 views

ECDH for more than two parties

2 votes
2 answers
792 views

Salsa20 / ChaCha with 128 bit keys

2 votes
0 answers
161 views

where are ssh.com's crypticore and seed defined?

2 votes
1 answer
47 views

consequences of using fixed values with OAEP

2 votes
1 answer
90 views

CAs are pre-loaded on the system, but how is it able to get intermediate certs?

2 votes
1 answer
194 views

do koblitz curves over $\mathbb{F}_{P}$ as generalized in SEC2 always have $a$ as 0?

2 votes
1 answer
806 views

ECDSA where the group order is larger than the hash size?

2 votes
1 answer
136 views

emulating AES GCM with AES CTR

2 votes
1 answer
97 views

choices for k in binary finite field modular reduction algorithm