user avatar
user avatar
user avatar
forest
Moderator
  • Member for 4 years, 6 months
  • Last seen this week
  • Laniakea
30 votes
2 answers
6k views

What are the implications of the new alleged key recovery attack preprint on SIMON?

17 votes
2 answers
2k views

Is there a contingency plan in the event of a catastrophic attack on AES?

16 votes
0 answers
339 views

Fewest qubits required for the discrete logarithm problem and integer factorization

16 votes
1 answer
1k views

Is this paper's technique for factoring RSA 2048 with noisy qubits realistic?

15 votes
1 answer
2k views

Understanding the wide trail design strategy

12 votes
2 answers
1k views

Why is pqRSA in the NIST PQC submissions?

12 votes
1 answer
808 views

What was the BassOmatic cipher, and what made it so weak?

10 votes
3 answers
695 views

Using weak hash functions to construct a stream cipher

9 votes
1 answer
626 views

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

9 votes
3 answers
3k views

Lightweight cipher using only 8-bit operations

9 votes
1 answer
326 views

Why would the use of Curve25519 in Dragonfly leak information?

8 votes
0 answers
199 views

Time-memory tradeoffs in Shor's algorithm

8 votes
1 answer
183 views

How complex must round constants be to resist slide attacks?

7 votes
0 answers
231 views

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

7 votes
0 answers
146 views

Does the bias in RC4 drop asymptotically further in the keystream?

7 votes
1 answer
257 views

How does Twofish avoid weak keys if it uses key-dependent S-boxes?

6 votes
1 answer
183 views

Are any block ciphers provably free of equivalent keys?

6 votes
0 answers
122 views

What is the "brand X" cipher mentioned in the Usenet thread about RC4?

6 votes
1 answer
761 views

Why was Rijndael the only cipher to have a variable number of rounds?

6 votes
0 answers
314 views

Precomputation attacks against ECDH

6 votes
1 answer
939 views

Why did MD4 replace MD2?

6 votes
1 answer
446 views

Differences between NewHope-CPA-KEM and NewHope-CCA-KEM

6 votes
1 answer
648 views

How can XTS be used to detect the presence of TrueCrypt hidden volumes?

5 votes
2 answers
547 views

Purpose of repeating a 16-byte key for Salsa20

5 votes
1 answer
154 views

Implications of identical round keys in AES (Rijndael)

5 votes
2 answers
207 views

Early propagation of carries in the BLAKE hash function

5 votes
1 answer
1k views

Is it problematic to use PBKDF2-HMAC-SHA256 to derive a 512-bit XTS key?

5 votes
0 answers
98 views

Effect of block size on diffusion rate

5 votes
0 answers
72 views

Security implications of using the low-order bits for Merkle–Damgård message length

5 votes
0 answers
196 views

Average false-positive rate for a round of Miller–Rabin