User forest

30 votes

2 answers

6k views

What are the implications of the new alleged key recovery attack preprint on SIMON?

cryptanalysis simon

asked May 11, 2019 at 4:20

17 votes

2 answers

2k views

Is there a contingency plan in the event of a catastrophic attack on AES?

asked Jan 17, 2019 at 8:30

16 votes

0 answers

339 views

Fewest qubits required for the discrete logarithm problem and integer factorization

rsa discrete-logarithm factoring quantum-computing

asked Feb 4, 2018 at 4:40

16 votes

1 answer

1k views

Is this paper's technique for factoring RSA 2048 with noisy qubits realistic?

rsa factoring quantum-cryptanalysis

asked May 25, 2019 at 3:13

15 votes

1 answer

2k views

Understanding the wide trail design strategy

cryptanalysis algorithm-design linear-cryptanalysis differential-analysis diffusion

asked Apr 1, 2018 at 2:28

12 votes

2 answers

1k views

Why is pqRSA in the NIST PQC submissions?

rsa post-quantum-cryptography nist multi-prime-rsa

asked May 28, 2018 at 2:08

12 votes

1 answer

808 views

What was the BassOmatic cipher, and what made it so weak?

cryptanalysis symmetric pgp history

asked Sep 1, 2018 at 0:41

10 votes

3 answers

695 views

Using weak hash functions to construct a stream cipher

stream-cipher md5 protocol-analysis

asked Apr 20, 2018 at 6:25

9 votes

1 answer

626 views

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

random-number-generator performance chacha

asked Mar 21, 2018 at 2:42

9 votes

3 answers

3k views

Lightweight cipher using only 8-bit operations

encryption performance lightweight embedded

asked Feb 22, 2018 at 23:44

9 votes

1 answer

326 views

Why would the use of Curve25519 in Dragonfly leak information?

elliptic-curves key-exchange pake

asked Dec 9, 2018 at 7:50

8 votes

0 answers

199 views

Time-memory tradeoffs in Shor's algorithm

factoring quantum-cryptanalysis shors-algorithm

asked Mar 10, 2019 at 6:20

8 votes

1 answer

183 views

How complex must round constants be to resist slide attacks?

cryptanalysis keys attack key-schedule constants

asked Jan 30, 2019 at 6:56

7 votes

0 answers

231 views

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

history rabin-cryptosystem

asked May 22, 2019 at 1:42

7 votes

0 answers

146 views

Does the bias in RC4 drop asymptotically further in the keystream?

stream-cipher rc4 distinguisher

asked Aug 3, 2019 at 8:44

7 votes

1 answer

257 views

How does Twofish avoid weak keys if it uses key-dependent S-boxes?

keys s-boxes twofish

asked Jan 11, 2019 at 2:57

6 votes

1 answer

183 views

Are any block ciphers provably free of equivalent keys?

block-cipher keys permutation

asked Aug 21, 2019 at 22:31

6 votes

0 answers

122 views

What is the "brand X" cipher mentioned in the Usenet thread about RC4?

rc4 history

asked Jun 2, 2019 at 0:33

6 votes

1 answer

761 views

Why was Rijndael the only cipher to have a variable number of rounds?

aes nist rijndael

asked Jan 17, 2021 at 3:49

6 votes

0 answers

314 views

Precomputation attacks against ECDH

elliptic-curves diffie-hellman number-field-sieve

asked Feb 1, 2019 at 3:00

6 votes

1 answer

939 views

Why did MD4 replace MD2?

hash history md4 md2

asked Feb 18, 2019 at 23:19

6 votes

1 answer

446 views

Differences between NewHope-CPA-KEM and NewHope-CCA-KEM

post-quantum-cryptography chosen-plaintext-attack chosen-ciphertext-attack kem newhope

asked Dec 30, 2018 at 11:14

6 votes

1 answer

648 views

How can XTS be used to detect the presence of TrueCrypt hidden volumes?

encryption disk-encryption xts truecrypt

asked Jan 20, 2018 at 11:21

5 votes

2 answers

547 views

Purpose of repeating a 16-byte key for Salsa20

keys salsa20

asked Mar 26, 2018 at 0:24

5 votes

1 answer

154 views

Implications of identical round keys in AES (Rijndael)

aes keys rijndael key-schedule

asked May 2, 2018 at 5:50

5 votes

2 answers

207 views

Early propagation of carries in the BLAKE hash function

hash diffusion blake2 constants

asked Dec 25, 2018 at 7:36

5 votes

1 answer

1k views

Is it problematic to use PBKDF2-HMAC-SHA256 to derive a 512-bit XTS key?

key-derivation sha-256 pbkdf-2 xts tweakable-cipher

asked May 24, 2018 at 3:17

5 votes

0 answers

98 views

Effect of block size on diffusion rate

salsa20 blocksize diffusion

asked Mar 5, 2019 at 9:31

5 votes

0 answers

72 views

Security implications of using the low-order bits for Merkle–Damgård message length

hash padding md5 merkle-damgaard

asked Jan 11, 2021 at 23:29

5 votes

0 answers

196 views

Average false-positive rate for a round of Miller–Rabin

prime-numbers

asked Mar 25 at 22:12

Stack Exchange Network

current community

your communities

more stack exchange communities

61 Questions

What are the implications of the new alleged key recovery attack preprint on SIMON?

Is there a contingency plan in the event of a catastrophic attack on AES?

Fewest qubits required for the discrete logarithm problem and integer factorization

Is this paper's technique for factoring RSA 2048 with noisy qubits realistic?

Understanding the wide trail design strategy

Why is pqRSA in the NIST PQC submissions?

What was the BassOmatic cipher, and what made it so weak?

Using weak hash functions to construct a stream cipher

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

Lightweight cipher using only 8-bit operations

Why would the use of Curve25519 in Dragonfly leak information?

Time-memory tradeoffs in Shor's algorithm

How complex must round constants be to resist slide attacks?

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

Does the bias in RC4 drop asymptotically further in the keystream?

How does Twofish avoid weak keys if it uses key-dependent S-boxes?

Are any block ciphers provably free of equivalent keys?

What is the "brand X" cipher mentioned in the Usenet thread about RC4?

Why was Rijndael the only cipher to have a variable number of rounds?

Precomputation attacks against ECDH

Why did MD4 replace MD2?

Differences between NewHope-CPA-KEM and NewHope-CCA-KEM

How can XTS be used to detect the presence of TrueCrypt hidden volumes?

Purpose of repeating a 16-byte key for Salsa20

Implications of identical round keys in AES (Rijndael)

Early propagation of carries in the BLAKE hash function

Is it problematic to use PBKDF2-HMAC-SHA256 to derive a 512-bit XTS key?

Effect of block size on diffusion rate

Security implications of using the low-order bits for Merkle–Damgård message length

Average false-positive rate for a round of Miller–Rabin