User hunter

29 votes

What is the difference between a HMAC and a hash of data?

answered Feb 26, 2013 at 20:40

17 votes

How much security is gained from hiding the nonce?

answered Aug 28, 2022 at 13:12

12 votes

Accepted

What is the correct way to implement PBKDF2 + AES CBC + HMAC?

answered Apr 27, 2017 at 8:03

10 votes

Accepted

How to use HMAC-SHA1, HMAC-SHA2 in conjunction with AES

answered Oct 31, 2013 at 12:18

9 votes

Accepted

Secure AES Key Generation via Salsa20?

answered Apr 7, 2014 at 21:35

8 votes

Accepted

How can encryption software accept password lengths which are not one of the AES key lengths?

answered Jan 25, 2013 at 13:38

7 votes

Accepted

Double Encrypting with two different keys

answered Dec 20, 2012 at 2:47

6 votes

Accepted

Can I dynamically calculate an appropriate number of iterations for PBKDF2 based on the system time, rather than using a fixed value?

answered Sep 12, 2013 at 15:19

6 votes

Accepted

Can I use SHA1 as license key?

answered Sep 20, 2013 at 12:30

5 votes

Accepted

Is scrypt a hashing function, encryption, or PBKDF?

answered Oct 14, 2013 at 0:10

5 votes

Accepted

Could a very long password theoretically eliminate the need for a slow hash?

answered Mar 21, 2013 at 3:06

5 votes

Using one-way hash functions as the encryption method

answered Sep 3, 2013 at 12:10

4 votes

Encryption and HMAC key derivation

answered May 23, 2014 at 19:02

4 votes

Accepted

repeated use of HKDF-extract on the same PRK

answered Jul 18, 2013 at 20:24

4 votes

Would it be possible to generate the original data from a SHA-512 checksum?

answered Oct 23, 2013 at 19:22

4 votes

Accepted

Hashing high entropy key into AES format

answered Oct 17, 2019 at 9:43

3 votes

Accepted

Capital passphrases with rainbow tables?

answered Aug 16, 2018 at 9:35

3 votes

A block cipher with independent keys for each round

answered Jul 5, 2013 at 16:45

3 votes

Accepted

Question about use of IV in this cipher

answered Jan 30, 2013 at 17:41

3 votes

Accepted

Is it overkill to run a key generated by OpenSSL through pbkdf2?

answered Mar 6, 2014 at 18:23

3 votes

Do sites store login password with hash? If so, can people can use hash collision to log in?

answered Jun 26, 2014 at 15:50

3 votes

Maximum output of HKDF

answered Nov 22, 2016 at 10:46

3 votes

SHA3 HMAC key padding

answered Apr 25, 2017 at 19:21

2 votes

Use of PBKDF2 when no access to HKDF?

answered Feb 16, 2017 at 17:23

2 votes

What is the difference between authenticating and signing a document?

answered Apr 4, 2014 at 19:49

2 votes

Accepted

Questions about BCrypt and PBKDF2

answered Jul 16, 2013 at 23:29

2 votes

Encoding multiple fields with same AES key and vector?

answered Nov 21, 2013 at 14:29

2 votes

Accepted

applying HKDF at both the client and the server

answered Nov 24, 2013 at 16:03

2 votes

scrypt and bcrypt for benefits of both?

answered Nov 26, 2013 at 16:53

2 votes

Algorithm/Technique for Steganography

answered Feb 22, 2013 at 17:33

Stack Exchange Network

44 Answers

What is the difference between a HMAC and a hash of data?

How much security is gained from hiding the nonce?

What is the correct way to implement PBKDF2 + AES CBC + HMAC?

How to use HMAC-SHA1, HMAC-SHA2 in conjunction with AES

Secure AES Key Generation via Salsa20?

How can encryption software accept password lengths which are not one of the AES key lengths?

Double Encrypting with two different keys

Can I dynamically calculate an appropriate number of iterations for PBKDF2 based on the system time, rather than using a fixed value?

Can I use SHA1 as license key?

Is scrypt a hashing function, encryption, or PBKDF?

Could a very long password theoretically eliminate the need for a slow hash?

Using one-way hash functions as the encryption method

Encryption and HMAC key derivation

repeated use of HKDF-extract on the same PRK

Would it be possible to generate the original data from a SHA-512 checksum?

Hashing high entropy key into AES format

Capital passphrases with rainbow tables?

A block cipher with independent keys for each round

Question about use of IV in this cipher

Is it overkill to run a key generated by OpenSSL through pbkdf2?

Do sites store login password with hash? If so, can people can use hash collision to log in?

Maximum output of HKDF

SHA3 HMAC key padding

Use of PBKDF2 when no access to HKDF?

What is the difference between authenticating and signing a document?

Questions about BCrypt and PBKDF2

Encoding multiple fields with same AES key and vector?

applying HKDF at both the client and the server

scrypt and bcrypt for benefits of both?

Algorithm/Technique for Steganography