fgrieu's user avatar
fgrieu's user avatar
fgrieu's user avatar
fgrieu
Moderator
  • Member for 11 years, 1 month
  • Last seen this week
  • France
53 votes
2 answers
7k views

What security authorities and standards reject $e=3$ in RSA, when, and with what rationale?

48 votes
2 answers
7k views

How is the Swiss post e-voting system supposed to work, and how was it wrong?

40 votes
1 answer
5k views

What is “Fast Prime”?

36 votes
0 answers
2k views

Who first published the interest of more than two prime factors in RSA?

32 votes
3 answers
5k views

Applicability of IBM's projected 50-qubit quantum computer Q to cryptanalysis?

30 votes
1 answer
3k views

How secure would HMAC-SHA3 be?

27 votes
3 answers
1k views

Are safe primes $p=2^k \pm s$ with $s$ small less recommandable than others as a discrete log modulus?

24 votes
4 answers
5k views

Attacks of the MAC construction $\mathcal{H}(m\mathbin\|k)$ for common hashes $\mathcal{H}$?

24 votes
1 answer
972 views

Memory-hard password hash in practice?

23 votes
3 answers
4k views

Proving knowledge of a preimage of a hash without disclosing it?

21 votes
1 answer
2k views

Security of RSA for paranoids with padding?

20 votes
2 answers
6k views

Is there a feasible method by which NIST ECC curves over prime fields could be intentionally rigged?

20 votes
2 answers
2k views

Security of Schnorr signature versus DSA and DLP

19 votes
3 answers
870 views

Collision or second preimage for the ChaCha core?

19 votes
1 answer
946 views

Message-Recovery variant of Ed25519 signature?

18 votes
1 answer
1k views

Verbatim of early work on public-key cryptography?

18 votes
1 answer
1k views

Do recent announcements about solving the DLP in $GF(2^{6120})$ apply to schemes proposed for cryptographic use?

18 votes
2 answers
2k views

Why was the winner of the AES competition not a Feistel cipher?

18 votes
1 answer
5k views

How does IBM's 53-bit quantum computer compare to classical ones for cryptanalytic tasks?

17 votes
3 answers
4k views

What does the special form of the base point of secp256k1 allow?

16 votes
0 answers
371 views

Finding $x$ such that $g^x\bmod p<p/k$?

16 votes
1 answer
6k views

What changed in PKCS#1 v2.2, and why?

16 votes
2 answers
4k views

How much can we compress RSA public keys?

16 votes
1 answer
4k views

Duration for attacking Two-Key Triple-DES Encryption using all RAM ever built?

16 votes
2 answers
2k views

Are AES-256's related-key weaknesses exploitable if it is used to build a hash?

16 votes
2 answers
922 views

Status of Algebraic Eraser key exchange?

15 votes
1 answer
719 views

Compact digital signature for noisy data

15 votes
3 answers
671 views

Expected entropy in $P(x)\oplus x$ for random $x$, where $P$ is a random permutation

13 votes
3 answers
1k views

Estimated entropy per bit given P-value of a statistical test, and number of bits tested?

13 votes
1 answer
532 views

Can a commutative block cipher be indistinguishable from a random one, assuming a random permutation of keyspace?

1
2 3 4 5 6