User forest

3

14

votes

2

answers

1k

views

Is there a contingency plan in the event of a catastrophic attack on AES?

2d ago AleksanderRas 2,064

2

12

votes

0

answers

148

views

Fewest qubits required for the discrete logarithm problem and integer factorization

rsa discrete-logarithm factoring

May 12 at 1:48 forest 2,935

3

11

votes

3

answers

277

views

Using weak hash functions to construct a stream cipher

stream-cipher md5 protocol-analysis

May 26 at 2:34 Ella Rose♦ 15.4k

3

9

votes

0

answers

160

views

What was the BassOmatic cipher, and what made it so weak?

cryptanalysis symmetric pgp

Dec 25 at 7:42 forest 2,935

3

8

votes

2

answers

447

views

Why is pqRSA in the NIST PQC submissions?

rsa post-quantum-cryptography nist multi-prime-rsa

May 28 at 14:10 Mike Ounsworth 2,140

2

6

votes

1

answer

85

views

How does Twofish avoid weak keys if it uses key-dependent S-boxes?

keys s-boxes twofish

Jan 13 at 14:43 Paul Uszak 7,212

4

6

votes

1

answer

103

views

Why would the use of Curve25519 in Dragonfly leak information?

elliptic-curves key-exchange pake

Jan 4 at 3:36 poncho 90.9k

3

6

votes

1

answer

228

views

Understanding the wide trail design strategy

cryptanalysis algorithm-design linear-cryptanalysis differential-analysis diffusion

Nov 21 at 2:40 forest 2,935

3

6

votes

1

answer

270

views

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

random-number-generator performance chacha

May 26 at 4:35 forest 2,935

1

5

votes

2

answers

116

views

Early propagation of carries in the BLAKE hash function

hash diffusion blake2 constants

Dec 27 at 16:55 Samuel Neves 7,400

3

5

votes

3

answers

742

views

Lightweight cipher using only 8-bit operations

encryption performance lightweight embedded

May 20 at 10:08 fgrieu 78.4k

3

5

votes

1

answer

252

views

How can XTS be used to detect the presence of TrueCrypt hidden volumes?

encryption disk-encryption xts truecrypt

Mar 4 at 14:49 Squeamish Ossifrage 16.4k

1

4

votes

1

answer

58

views

Differences between NewHope-CPA-KEM and NewHope-CCA-KEM

post-quantum-cryptography chosen-plaintext-attack chosen-ciphertext-attack kem newhope

Jan 4 at 4:08 poncho 90.9k

1

4

votes

0

answers

76

views

Implications of identical round keys in Rijndael

keys rijndael key-schedule

Nov 2 at 2:16 forest 2,935

1

4

votes

1

answer

104

views

Using a PRP $\pi: \{0,1\}^{16} \to \{0,1\}^{16}$ to construct an ideal cipher

block-cipher provable-security pseudo-random-permutation

Jul 5 at 23:27 Squeamish Ossifrage 16.4k

3

4

votes

1

answer

264

views

Is it problematic to use PBKDF2-HMAC-SHA256 to derive a 512-bit XTS key?

key-derivation sha-256 pbkdf-2 xts tweakable-cipher

May 25 at 17:12 Squeamish Ossifrage 16.4k

2

4

votes

1

answer

55

views

Lightweight primality certificates for untrusted DH parameters

diffie-hellman prime-numbers verifiability lightweight

May 16 at 14:11 Squeamish Ossifrage 16.4k

1

4

votes

2

answers

142

views

Purpose of repeating a 16-byte key for Salsa20

keys salsa20

Apr 5 at 3:42 Squeamish Ossifrage 16.4k

1

3

votes

2

answers

112

views

Counter mode with $\operatorname{AES}_k(m)$ vs $\operatorname{AES}_m(k)$

aes block-cipher ctr

Jul 11 at 2:10 forest 2,935

2

3

votes

0

answers

97

views

Optimizing the AES key schedule when round keys cannot be cached

aes performance key-schedule

Jun 15 at 20:17 forest 2,935

2

3

votes

2

answers

153

views

Is there any concrete reason to call BLAKE more secure than BLAKE2? [duplicate]

hash blake2

May 29 at 18:58 Squeamish Ossifrage 16.4k

1

3

votes

1

answer

65

views

Difference between one-level and two-level E0 encryption

cryptanalysis stream-cipher lfsr

May 12 at 2:24 forest 2,935

1

3

votes

0

answers

83

views

Safely using ciphers that take small key sizes

block-cipher symmetric stream-cipher key-size multiple-encryption

Mar 23 at 3:12 forest 2,935

2

votes

1

answer

157

views

XTS mode with the tweak key as the sole secret

xts

Jan 11 at 8:58 forest 2,935

1

2

votes

0

answers

132

views

An XTS penguin?

distinguisher xts

May 25 at 1:18 forest 2,935

1

2

votes

1

answer

363

views

384-bit ChaCha20 / Salsa20

random-number-generator key-size salsa20 chacha

May 9 at 5:26 forest 2,935

1

2

votes

1

answer

81

views

Malicious DH parameters without using composite numbers

diffie-hellman discrete-logarithm prime-numbers factoring backdoors

Feb 25 at 23:46 Squeamish Ossifrage 16.4k

1

2

votes

1

answer

117

views

Why does FIPS-180-4 require the final padding block start with a 1?

sha-1 padding sha-2 merkle-damgaard md4

Feb 14 '18 at 8:45 Elias 3,813

1

vote

2

answers

117

views

Purpose of folding a digest in half

hash random-number-generator entropy sha-1

Mar 18 at 8:16 otus 28k

1

vote

2

answers

67

views

Are there any key exchange schemes that only require entropy on one side?

key-exchange randomness entropy

Dec 15 '17 at 9:13 fgrieu 78.4k

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

30 Questions

Is there a contingency plan in the event of a catastrophic attack on AES?

Fewest qubits required for the discrete logarithm problem and integer factorization

Using weak hash functions to construct a stream cipher

What was the BassOmatic cipher, and what made it so weak?

Why is pqRSA in the NIST PQC submissions?

How does Twofish avoid weak keys if it uses key-dependent S-boxes?

Why would the use of Curve25519 in Dragonfly leak information?

Understanding the wide trail design strategy

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

Early propagation of carries in the BLAKE hash function

Lightweight cipher using only 8-bit operations

How can XTS be used to detect the presence of TrueCrypt hidden volumes?

Differences between NewHope-CPA-KEM and NewHope-CCA-KEM

Implications of identical round keys in Rijndael

Using a PRP $\pi: \{0,1\}^{16} \to \{0,1\}^{16}$ to construct an ideal cipher

Is it problematic to use PBKDF2-HMAC-SHA256 to derive a 512-bit XTS key?

Lightweight primality certificates for untrusted DH parameters

Purpose of repeating a 16-byte key for Salsa20

Counter mode with $\operatorname{AES}_k(m)$ vs $\operatorname{AES}_m(k)$

Optimizing the AES key schedule when round keys cannot be cached

Is there any concrete reason to call BLAKE more secure than BLAKE2? [duplicate]

Difference between one-level and two-level E0 encryption

Safely using ciphers that take small key sizes

XTS mode with the tweak key as the sole secret

An XTS penguin?

384-bit ChaCha20 / Salsa20

Malicious DH parameters without using composite numbers

Why does FIPS-180-4 require the final padding block start with a 1?

Purpose of folding a digest in half

Are there any key exchange schemes that only require entropy on one side?