user avatar
user avatar
user avatar
forest
Moderator
  • Member for 4 years, 5 months
  • Last seen this week
  • Laniakea
30 votes
2 answers
6k views

What are the implications of the new alleged key recovery attack preprint on SIMON?

17 votes
2 answers
2k views

Is there a contingency plan in the event of a catastrophic attack on AES?

16 votes
1 answer
996 views

Is this paper's technique for factoring RSA 2048 with noisy qubits realistic?

15 votes
0 answers
318 views

Fewest qubits required for the discrete logarithm problem and integer factorization

15 votes
1 answer
2k views

Understanding the wide trail design strategy

12 votes
2 answers
1k views

Why is pqRSA in the NIST PQC submissions?

12 votes
1 answer
803 views

What was the BassOmatic cipher, and what made it so weak?

10 votes
3 answers
690 views

Using weak hash functions to construct a stream cipher

9 votes
1 answer
619 views

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

9 votes
3 answers
3k views

Lightweight cipher using only 8-bit operations

8 votes
1 answer
321 views

Why would the use of Curve25519 in Dragonfly leak information?

8 votes
0 answers
197 views

Time-memory tradeoffs in Shor's algorithm

8 votes
1 answer
176 views

How complex must round constants be to resist slide attacks?

7 votes
1 answer
255 views

How does Twofish avoid weak keys if it uses key-dependent S-boxes?

7 votes
0 answers
230 views

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

7 votes
0 answers
146 views

Does the bias in RC4 drop asymptotically further in the keystream?

6 votes
0 answers
121 views

What is the "brand X" cipher mentioned in the Usenet thread about RC4?

6 votes
1 answer
182 views

Are any block ciphers provably free of equivalent keys?

6 votes
1 answer
757 views

Why was Rijndael the only cipher to have a variable number of rounds?

6 votes
1 answer
438 views

Differences between NewHope-CPA-KEM and NewHope-CCA-KEM

6 votes
0 answers
307 views

Precomputation attacks against ECDH

6 votes
1 answer
896 views

Why did MD4 replace MD2?

6 votes
1 answer
646 views

How can XTS be used to detect the presence of TrueCrypt hidden volumes?

5 votes
2 answers
541 views

Purpose of repeating a 16-byte key for Salsa20

5 votes
1 answer
154 views

Implications of identical round keys in AES (Rijndael)

5 votes
0 answers
95 views

Effect of block size on diffusion rate

5 votes
2 answers
206 views

Early propagation of carries in the BLAKE hash function

5 votes
1 answer
1k views

Is it problematic to use PBKDF2-HMAC-SHA256 to derive a 512-bit XTS key?

5 votes
0 answers
190 views

Average false-positive rate for a round of Miller–Rabin

5 votes
0 answers
71 views

Security implications of using the low-order bits for Merkle–Damgård message length