Henno Brandsma's user avatar
Henno Brandsma's user avatar
Henno Brandsma's user avatar
Henno Brandsma
  • Member for 11 years, 1 month
  • Last seen more than a month ago
17 votes

Why is PuTTYgen-created RSA public exponent(e) not in {3,17,65537}?

14 votes
Accepted

How is LUKS dm-crypt secure if the key is stored with the encrypted data?

11 votes

How to attack a classical cipher using known partial plaintext?

9 votes

What are the main weaknesses of a Playfair cipher, if any?

8 votes

AES Inverse Key Schedule

8 votes

Understanding MACs and why cleartext is sent over

7 votes
Accepted

What causes first block of AES decryption to be garbled, even with correct IV?

6 votes

What are preimage resistance and collision resistance, and how can the lack thereof be exploited?

6 votes
Accepted

AES column mixing and S-Box confusion

6 votes
Accepted

Why is the XOR of plaintexts equal to the XOR of ciphertexts with a two time pad?

5 votes

How can I use the whole potential of DES?

5 votes
Accepted

Message exchange with textbook RSA

5 votes

Cipher Feedback Mode

5 votes

Why is g is less than p in Diffie-Hellman?

5 votes
Accepted

When is each key used when encrypting an email using OpenPGP?

5 votes

How to forge Schnorr signatures if you can guess the challenge

5 votes

Base64 encoding of strings

5 votes

RSA - How to change the encrypted numerical result into text?

4 votes

Is it reasonable to assure that p-1 and q-1 aren't smooth?

4 votes

Finding roots in $\mathbb{Z}_p$

4 votes
Accepted

Problem reproducing AES results

3 votes

Implementing AES-CBC (Matasano Crypto Challenge 10)

3 votes
Accepted

help understanding part of Wiener's attack on RSA w/ small d

3 votes
Accepted

How to verify CA certificate from Yubico with openssl?

3 votes

How were semagrams encrypted in the pre-digital era?

3 votes
Accepted

Attack on textbook RSA with small messages

3 votes

Diffie-Hellman using a different modulus on both sides

3 votes

Is it secure to transmit a short plaintext with its MAC?

3 votes
Accepted

Deriving 256-bit key from PBKDF2-SHA1

3 votes

Why is padding the plaintext with a random string before encryption worse than OAEP / PKCS#7?

1
2 3 4 5