Skip to main content
forest's user avatar
forest's user avatar
forest's user avatar
forest
  • Member for 6 years, 6 months
  • Last seen more than a month ago
  • Laniakea
31 votes
2 answers
6k views

What are the implications of the new alleged key recovery attack preprint on SIMON?

19 votes
1 answer
2k views

Understanding the wide trail design strategy

17 votes
0 answers
425 views

Fewest qubits required for the discrete logarithm problem and integer factorization

17 votes
2 answers
2k views

Is there a contingency plan in the event of a catastrophic attack on AES?

16 votes
2 answers
2k views

Why is pqRSA in the NIST PQC submissions?

16 votes
1 answer
1k views

Is this paper's technique for factoring RSA 2048 with noisy qubits realistic?

12 votes
1 answer
913 views

What was the BassOmatic cipher, and what made it so weak?

10 votes
3 answers
866 views

Using weak hash functions to construct a stream cipher

10 votes
1 answer
775 views

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

9 votes
4 answers
4k views

Lightweight cipher using only 8-bit operations

9 votes
1 answer
409 views

Why would the use of Curve25519 in Dragonfly leak information?

8 votes
1 answer
216 views

How complex must round constants be to resist slide attacks?

8 votes
0 answers
225 views

Time-memory tradeoffs in Shor's algorithm

7 votes
1 answer
2k views

Why did MD4 replace MD2?

7 votes
1 answer
2k views

Is it problematic to use PBKDF2-HMAC-SHA256 to derive a 512-bit XTS key?

7 votes
0 answers
238 views

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

7 votes
0 answers
209 views

Does the bias in RC4 drop asymptotically further in the keystream?

7 votes
1 answer
317 views

How does Twofish avoid weak keys if it uses key-dependent S-boxes?

6 votes
1 answer
198 views

Are any block ciphers provably free of equivalent keys?

6 votes
0 answers
132 views

What is the "brand X" cipher mentioned in the Usenet thread about RC4?

6 votes
1 answer
839 views

Why was Rijndael the only cipher to have a variable number of rounds?

6 votes
1 answer
529 views

Differences between NewHope-CPA-KEM and NewHope-CCA-KEM

6 votes
0 answers
405 views

Precomputation attacks against ECDH

6 votes
1 answer
770 views

How can XTS be used to detect the presence of TrueCrypt hidden volumes?

6 votes
2 answers
830 views

Purpose of repeating a 16-byte key for Salsa20

5 votes
1 answer
165 views

Implications of identical round keys in AES (Rijndael)

5 votes
0 answers
109 views

Effect of block size on diffusion rate

5 votes
2 answers
241 views

Early propagation of carries in the BLAKE hash function

5 votes
0 answers
151 views

Resistance to integral attacks by North Korean block cipher Jipsam1

5 votes
0 answers
461 views

Average false-positive rate for a round of Miller–Rabin