User forest

30 votes

2 answers

6k views

What are the implications of the new alleged key recovery attack preprint on SIMON?

cryptanalysis simon

asked May 11, 2019 at 4:20

17 votes

2 answers

2k views

Is there a contingency plan in the event of a catastrophic attack on AES?

asked Jan 17, 2019 at 8:30

16 votes

1 answer

996 views

Is this paper's technique for factoring RSA 2048 with noisy qubits realistic?

rsa factoring quantum-cryptanalysis

asked May 25, 2019 at 3:13

15 votes

0 answers

318 views

Fewest qubits required for the discrete logarithm problem and integer factorization

rsa discrete-logarithm factoring quantum-computing

asked Feb 4, 2018 at 4:40

15 votes

1 answer

2k views

Understanding the wide trail design strategy

cryptanalysis algorithm-design linear-cryptanalysis differential-analysis diffusion

asked Apr 1, 2018 at 2:28

12 votes

2 answers

1k views

Why is pqRSA in the NIST PQC submissions?

rsa post-quantum-cryptography nist multi-prime-rsa

asked May 28, 2018 at 2:08

12 votes

1 answer

803 views

What was the BassOmatic cipher, and what made it so weak?

cryptanalysis symmetric pgp history

asked Sep 1, 2018 at 0:41

10 votes

3 answers

690 views

Using weak hash functions to construct a stream cipher

stream-cipher md5 protocol-analysis

asked Apr 20, 2018 at 6:25

9 votes

1 answer

619 views

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

random-number-generator performance chacha

asked Mar 21, 2018 at 2:42

9 votes

3 answers

3k views

Lightweight cipher using only 8-bit operations

encryption performance lightweight embedded

asked Feb 22, 2018 at 23:44

8 votes

1 answer

321 views

Why would the use of Curve25519 in Dragonfly leak information?

elliptic-curves key-exchange pake

asked Dec 9, 2018 at 7:50

8 votes

0 answers

197 views

Time-memory tradeoffs in Shor's algorithm

factoring quantum-cryptanalysis shors-algorithm

asked Mar 10, 2019 at 6:20

8 votes

1 answer

176 views

How complex must round constants be to resist slide attacks?

cryptanalysis keys attack key-schedule constants

asked Jan 30, 2019 at 6:56

7 votes

1 answer

255 views

How does Twofish avoid weak keys if it uses key-dependent S-boxes?

keys s-boxes twofish

asked Jan 11, 2019 at 2:57

7 votes

0 answers

230 views

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

history rabin-cryptosystem

asked May 22, 2019 at 1:42

7 votes

0 answers

146 views

Does the bias in RC4 drop asymptotically further in the keystream?

stream-cipher rc4 distinguisher

asked Aug 3, 2019 at 8:44

6 votes

0 answers

121 views

What is the "brand X" cipher mentioned in the Usenet thread about RC4?

rc4 history

asked Jun 2, 2019 at 0:33

6 votes

1 answer

182 views

Are any block ciphers provably free of equivalent keys?

block-cipher keys permutation

asked Aug 21, 2019 at 22:31

6 votes

1 answer

757 views

Why was Rijndael the only cipher to have a variable number of rounds?

aes nist rijndael

asked Jan 17, 2021 at 3:49

6 votes

1 answer

438 views

Differences between NewHope-CPA-KEM and NewHope-CCA-KEM

post-quantum-cryptography chosen-plaintext-attack chosen-ciphertext-attack kem newhope

asked Dec 30, 2018 at 11:14

6 votes

0 answers

307 views

Precomputation attacks against ECDH

elliptic-curves diffie-hellman number-field-sieve

asked Feb 1, 2019 at 3:00

6 votes

1 answer

896 views

Why did MD4 replace MD2?

hash history md4 md2

asked Feb 18, 2019 at 23:19

6 votes

1 answer

646 views

How can XTS be used to detect the presence of TrueCrypt hidden volumes?

encryption disk-encryption xts truecrypt

asked Jan 20, 2018 at 11:21

5 votes

2 answers

541 views

Purpose of repeating a 16-byte key for Salsa20

keys salsa20

asked Mar 26, 2018 at 0:24

5 votes

1 answer

154 views

Implications of identical round keys in AES (Rijndael)

aes keys rijndael key-schedule

asked May 2, 2018 at 5:50

5 votes

0 answers

95 views

Effect of block size on diffusion rate

salsa20 blocksize diffusion

asked Mar 5, 2019 at 9:31

5 votes

2 answers

206 views

Early propagation of carries in the BLAKE hash function

hash diffusion blake2 constants

asked Dec 25, 2018 at 7:36

5 votes

1 answer

1k views

Is it problematic to use PBKDF2-HMAC-SHA256 to derive a 512-bit XTS key?

key-derivation sha-256 pbkdf-2 xts tweakable-cipher

asked May 24, 2018 at 3:17

5 votes

0 answers

190 views

Average false-positive rate for a round of Miller–Rabin

prime-numbers

asked Mar 25 at 22:12

5 votes

0 answers

71 views

Security implications of using the low-order bits for Merkle–Damgård message length

hash padding md5 merkle-damgaard

asked Jan 11, 2021 at 23:29

Stack Exchange Network

current community

your communities

more stack exchange communities

61 Questions

What are the implications of the new alleged key recovery attack preprint on SIMON?

Is there a contingency plan in the event of a catastrophic attack on AES?

Is this paper's technique for factoring RSA 2048 with noisy qubits realistic?

Fewest qubits required for the discrete logarithm problem and integer factorization

Understanding the wide trail design strategy

Why is pqRSA in the NIST PQC submissions?

What was the BassOmatic cipher, and what made it so weak?

Using weak hash functions to construct a stream cipher

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

Lightweight cipher using only 8-bit operations

Why would the use of Curve25519 in Dragonfly leak information?

Time-memory tradeoffs in Shor's algorithm

How complex must round constants be to resist slide attacks?

How does Twofish avoid weak keys if it uses key-dependent S-boxes?

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

Does the bias in RC4 drop asymptotically further in the keystream?

What is the "brand X" cipher mentioned in the Usenet thread about RC4?

Are any block ciphers provably free of equivalent keys?

Why was Rijndael the only cipher to have a variable number of rounds?

Differences between NewHope-CPA-KEM and NewHope-CCA-KEM

Precomputation attacks against ECDH

Why did MD4 replace MD2?

How can XTS be used to detect the presence of TrueCrypt hidden volumes?

Purpose of repeating a 16-byte key for Salsa20

Implications of identical round keys in AES (Rijndael)

Effect of block size on diffusion rate

Early propagation of carries in the BLAKE hash function

Is it problematic to use PBKDF2-HMAC-SHA256 to derive a 512-bit XTS key?

Average false-positive rate for a round of Miller–Rabin

Security implications of using the low-order bits for Merkle–Damgård message length