User forest

42 votes

Accepted

Is one-time pad encryption vulnerable when near identical data is sent many times with different OTP?

answered Feb 8, 2019 at 8:04

27 votes

Accepted

When to use Argon2i vs Argon2d vs Argon2id?

answered Aug 7, 2019 at 4:05

21 votes

Can one use a reversible hash algorithm as a compression function?

answered Feb 21, 2021 at 1:08

20 votes

Accepted

Must RSA exponent and modulus be odd

answered Dec 30, 2022 at 1:29

20 votes

Accepted

What is the point of digital signatures if confidentiality is violated?

answered Jan 25, 2019 at 10:52

20 votes

Accepted

Is lattice-based cryptography practical?

answered Aug 19, 2018 at 1:44

18 votes

Accepted

What is a related key?

answered Jan 29, 2019 at 1:33

17 votes

Accepted

Difference between RC2, RC4, RC5 and RC6

answered Apr 1, 2019 at 23:25

16 votes

Accepted

Why expand keys? Why not rather generate a longer key?

answered Jun 16, 2022 at 23:30

15 votes

Accepted

Ed25519 cryptanalysis and backdoor?

answered Sep 1, 2018 at 2:36

14 votes

Accepted

Do PGP keys with expiration date set expiration date in Encrypted messages too?

answered Feb 17, 2019 at 11:25

13 votes

Accepted

Should we run PBKDF2 for every plaintext to be protected or should we run PBKDF2 only once?

answered Sep 1, 2019 at 7:54

13 votes

Accepted

Can SHA512 and SHA3-512 Make Same Collisions?

answered Jun 11, 2021 at 1:33

13 votes

Accepted

How much security is gained from hiding the nonce?

answered Aug 29, 2022 at 19:37

12 votes

How can you prove that a certain file was downloaded from a certain website?

answered Nov 7, 2022 at 1:29

11 votes

Accepted

What are best practices for long term storage (~20 years) of encrypted / sensitive files?

answered Feb 21, 2021 at 22:37

11 votes

Accepted

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

answered Mar 21, 2018 at 3:52

10 votes

Accepted

Can Whirlpool take advantage of AES-NI?

answered Mar 9, 2018 at 7:00

10 votes

Accepted

Is it ok to transmit an IV as a custom HTTP header?

answered Sep 1, 2018 at 0:05

10 votes

Accepted

Why are there so many versions of the TEA block cipher?

answered Sep 17, 2018 at 3:34

10 votes

Accepted

Salsa20 Implementation: Sum of 2 Words with Carries Suppressed

answered Feb 27, 2019 at 5:03

10 votes

How to check a file was encrypted (really & correctly)

answered Aug 5, 2019 at 11:57

10 votes

How many bits in the resultant hash will change, if the x bits are changed in its the original input?

answered Jul 17, 2019 at 1:56

10 votes

Why does BitLocker not use RSA?

answered Apr 23, 2019 at 8:34

10 votes

Can a public key be same as private key?

answered Jul 9, 2019 at 6:16

10 votes

Accepted

Is there a 32 bit block cipher that is also a permutation over all 4bn elements?

answered Dec 18, 2022 at 22:40

9 votes

Why there are still no keys longer than 256 bit?

answered Aug 29, 2022 at 0:57

9 votes

Changing an Encryption scheme from AES to ChaCha20

answered Mar 7, 2021 at 10:44

9 votes

Notable Non-Western Cryptosystems that have been widely deployed?

answered Jun 15, 2021 at 0:05

9 votes

Can a zero nonce be safely used with AES-GCM if the key is random and never used again?

answered Apr 15, 2019 at 7:56

Stack Exchange Network

195 Answers

Is one-time pad encryption vulnerable when near identical data is sent many times with different OTP?

When to use Argon2i vs Argon2d vs Argon2id?

Can one use a reversible hash algorithm as a compression function?

Must RSA exponent and modulus be odd

What is the point of digital signatures if confidentiality is violated?

Is lattice-based cryptography practical?

What is a related key?

Difference between RC2, RC4, RC5 and RC6

Why expand keys? Why not rather generate a longer key?

Ed25519 cryptanalysis and backdoor?

Do PGP keys with expiration date set expiration date in Encrypted messages too?

Should we run PBKDF2 for every plaintext to be protected or should we run PBKDF2 only once?

Can SHA512 and SHA3-512 Make Same Collisions?

How much security is gained from hiding the nonce?

How can you prove that a certain file was downloaded from a certain website?

What are best practices for long term storage (~20 years) of encrypted / sensitive files?

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

Can Whirlpool take advantage of AES-NI?

Is it ok to transmit an IV as a custom HTTP header?

Why are there so many versions of the TEA block cipher?

Salsa20 Implementation: Sum of 2 Words with Carries Suppressed

How to check a file was encrypted (really & correctly)

How many bits in the resultant hash will change, if the x bits are changed in its the original input?

Why does BitLocker not use RSA?

Can a public key be same as private key?

Is there a 32 bit block cipher that is also a permutation over all 4bn elements?

Why there are still no keys longer than 256 bit?

Changing an Encryption scheme from AES to ChaCha20

Notable Non-Western Cryptosystems that have been widely deployed?

Can a zero nonce be safely used with AES-GCM if the key is random and never used again?