fgrieu's user avatar
fgrieu's user avatar
fgrieu's user avatar
fgrieu
Moderator
  • Member for 12 years, 6 months
  • Last seen this week
  • France
55 votes
2 answers
9k views

What security authorities and standards reject $e=3$ in RSA, when, and with what rationale?

48 votes
2 answers
7k views

How is the Swiss post e-voting system supposed to work, and how was it wrong?

40 votes
1 answer
5k views

What is “Fast Prime”?

39 votes
1 answer
2k views

Who first published the interest of more than two prime factors in RSA?

32 votes
3 answers
5k views

Applicability of IBM's projected 50-qubit quantum computer Q to cryptanalysis?

30 votes
1 answer
4k views

How secure would HMAC-SHA3 be?

27 votes
3 answers
2k views

Are safe primes $p=2^k \pm s$ with $s$ small less recommandable than others as a discrete log modulus?

26 votes
4 answers
6k views

Attacks of the MAC construction $\mathcal{H}(m\mathbin\|k)$ for common hashes $\mathcal{H}$?

25 votes
3 answers
5k views

Proving knowledge of a preimage of a hash without disclosing it?

24 votes
1 answer
1k views

Memory-hard password hash in practice?

22 votes
2 answers
7k views

Is there a feasible method by which NIST ECC curves over prime fields could be intentionally rigged?

21 votes
1 answer
2k views

Security of RSA for paranoids with padding?

20 votes
3 answers
998 views

Collision or second preimage for the ChaCha core?

20 votes
2 answers
3k views

Security of Schnorr signature versus DSA and DLP

20 votes
1 answer
5k views

How does IBM's 53-bit quantum computer compare to classical ones for cryptanalytic tasks?

19 votes
1 answer
1k views

Message-Recovery variant of Ed25519 signature?

18 votes
1 answer
1k views

Verbatim of early work on public-key cryptography?

18 votes
1 answer
1k views

Do recent announcements about solving the DLP in $GF(2^{6120})$ apply to schemes proposed for cryptographic use?

18 votes
1 answer
7k views

What changed in PKCS#1 v2.2, and why?

18 votes
2 answers
3k views

Why was the winner of the AES competition not a Feistel cipher?

18 votes
0 answers
451 views

Finding $x$ such that $g^x\bmod p<p/k$?

17 votes
3 answers
5k views

What does the special form of the base point of secp256k1 allow?

17 votes
2 answers
2k views

Are AES-256's related-key weaknesses exploitable if it is used to build a hash?

17 votes
2 answers
974 views

Status of Algebraic Eraser key exchange?

16 votes
2 answers
4k views

How much can we compress RSA public keys?

16 votes
1 answer
4k views

Duration for attacking Two-Key Triple-DES Encryption using all RAM ever built?

15 votes
1 answer
744 views

Compact digital signature for noisy data

15 votes
3 answers
731 views

Expected entropy in $P(x)\oplus x$ for random $x$, where $P$ is a random permutation

14 votes
1 answer
601 views

Can a commutative block cipher be indistinguishable from a random one, assuming a random permutation of keyspace?

14 votes
1 answer
6k views

Is a second preimage attack on MD5 feasible?

1
2 3 4 5
7