User neubert

17 votes

5 answers

3k views

Creating a small number from a random octet string

random-number-generator

asked Dec 15, 2012 at 16:48

16 votes

2 answers

2k views

How did || come to be used in crypto texts to represent concatenation?

asked Dec 24, 2018 at 4:15

10 votes

1 answer

489 views

how does BearSSL's GCM modular reduction work?

finite-field gcm aes-gcm

asked Jan 13, 2019 at 2:06

9 votes

1 answer

1k views

why did oaep change from pkcs1 v2.0 and v2.1?

rsa oaep pkcs1

asked Sep 16, 2016 at 16:23

8 votes

0 answers

194 views

GCM with reversed poly

finite-field gcm aes-gcm

asked Jan 8, 2019 at 13:28

7 votes

3 answers

4k views

Why does OpenSSL differentiate between PSS and non-PSS for private key generation?

rsa keys openssl rsa-pss

asked May 9, 2019 at 1:50

7 votes

1 answer

1k views

Ed25519 PKCS8 private key example from IETF draft seems malformed

public-key elliptic-curves ed25519 pkcs8

asked Jun 7, 2018 at 11:14

7 votes

1 answer

668 views

preferred method for generating k for DSA / ECDSA

signature dsa

asked Dec 25, 2016 at 22:07

7 votes

1 answer

14k views

ECDSA private key format

public-key elliptic-curves file-format

asked Jun 29, 2017 at 4:11

7 votes

1 answer

881 views

Can non-assembly crypto libraries truly be secure against timing attacks?

implementation timing-attack

asked Aug 2, 2015 at 3:29

6 votes

1 answer

3k views

Transforming SHA-512 into SHA-512/256?

hash sha-2 sha-512

asked Dec 21, 2015 at 0:31

5 votes

1 answer

315 views

How exploitable are cache timing attacks?

timing-attack

asked Mar 12, 2016 at 15:09

5 votes

1 answer

313 views

Aside from DES, has the NSA ever strengthened algorithms?

des history nsa

asked Jul 17, 2018 at 2:45

5 votes

1 answer

657 views

Why doesn't the GCM spec use a more efficient multiplication algorithm?

encryption aes finite-field gcm ghash

asked Dec 19, 2018 at 4:25

4 votes

1 answer

131 views

questions about modular reduction algorithm over $F_{2^m}$

elliptic-curves finite-field

asked Sep 9, 2018 at 20:13

4 votes

1 answer

247 views

representing binary finite fields in ASN.1

elliptic-curves finite-field asn.1

asked Jul 4, 2017 at 19:12

4 votes

1 answer

766 views

What is tiger192,4 in PHP?

hash

asked Sep 6, 2015 at 5:07

3 votes

1 answer

236 views

simulating rc4-256 with rc4-128

rc4

asked Nov 25, 2014 at 2:13

3 votes

1 answer

252 views

Why does FIPS 186-4 seem to have an excessively complex q generation?

dsa prime-numbers domain-parameters

asked Jul 28, 2016 at 5:32

3 votes

1 answer

452 views

why was padding changed when keccak became sha3?

sha-3 keccak

asked Jul 17, 2018 at 2:40

3 votes

1 answer

382 views

Representations of secret keys on Curve25519

elliptic-curves diffie-hellman libsodium x25519

asked Jul 16, 2019 at 13:42

2 votes

1 answer

892 views

ECDH for more than two parties

elliptic-curves diffie-hellman

asked Jul 27, 2019 at 21:35

2 votes

2 answers

792 views

Salsa20 / ChaCha with 128 bit keys

chacha salsa20

asked Jan 23, 2019 at 22:13

2 votes

0 answers

161 views

where are ssh.com's crypticore and seed defined?

encryption ssh

asked Feb 20, 2020 at 12:41

2 votes

1 answer

47 views

consequences of using fixed values with OAEP

rsa oaep pkcs1

asked Jun 8, 2019 at 23:57

2 votes

1 answer

90 views

CAs are pre-loaded on the system, but how is it able to get intermediate certs?

signature tls openssl certificates

asked Feb 26, 2018 at 17:17

2 votes

1 answer

194 views

do koblitz curves over $\mathbb{F}_{P}$ as generalized in SEC2 always have $a$ as 0?

elliptic-curves finite-field

asked Mar 24, 2018 at 19:51

2 votes

1 answer

806 views

ECDSA where the group order is larger than the hash size?

elliptic-curves dsa

asked Sep 30, 2018 at 23:16

2 votes

1 answer

136 views

emulating AES GCM with AES CTR

ctr aes-gcm

asked Dec 3, 2018 at 8:27

2 votes

1 answer

97 views

choices for k in binary finite field modular reduction algorithm

elliptic-curves modular-arithmetic finite-field

asked Sep 7, 2018 at 18:43

Stack Exchange Network

current community

your communities

more stack exchange communities

72 Questions

Creating a small number from a random octet string

How did || come to be used in crypto texts to represent concatenation?

how does BearSSL's GCM modular reduction work?

why did oaep change from pkcs1 v2.0 and v2.1?

GCM with reversed poly

Why does OpenSSL differentiate between PSS and non-PSS for private key generation?

Ed25519 PKCS8 private key example from IETF draft seems malformed

preferred method for generating k for DSA / ECDSA

ECDSA private key format

Can non-assembly crypto libraries truly be secure against timing attacks?

Transforming SHA-512 into SHA-512/256?

How exploitable are cache timing attacks?

Aside from DES, has the NSA ever strengthened algorithms?

Why doesn't the GCM spec use a more efficient multiplication algorithm?

questions about modular reduction algorithm over $F_{2^m}$

representing binary finite fields in ASN.1

What is tiger192,4 in PHP?

simulating rc4-256 with rc4-128

Why does FIPS 186-4 seem to have an excessively complex q generation?

why was padding changed when keccak became sha3?

Representations of secret keys on Curve25519

ECDH for more than two parties

Salsa20 / ChaCha with 128 bit keys

where are ssh.com's crypticore and seed defined?

consequences of using fixed values with OAEP

CAs are pre-loaded on the system, but how is it able to get intermediate certs?

do koblitz curves over $\mathbb{F}_{P}$ as generalized in SEC2 always have $a$ as 0?

ECDSA where the group order is larger than the hash size?

emulating AES GCM with AES CTR

choices for k in binary finite field modular reduction algorithm