User Patriot

406 votes

13 answers

163k views

Should we MAC-then-encrypt or encrypt-then-MAC?

Thomas Pornin

84.8k

asked Jul 19, 2011 at 21:39

224 votes

2 answers

121k views

What are the differences between a digital signature, a MAC and a hash?

hash signature authentication mac non-repudiation

Flimm

2,538

asked Dec 10, 2012 at 12:16

173 votes

4 answers

118k views

Why is elliptic curve cryptography not widely used, compared to RSA?

rsa public-key elliptic-curves computational-complexity-theory

Vineet Menon

1,915

asked Nov 15, 2011 at 6:19

162 votes

2 answers

159k views

What is the main difference between a key, an IV and a nonce?

keys initialization-vector encryption terminology

curious

5,932

asked Oct 5, 2012 at 8:20

159 votes

4 answers

51k views

Should we trust the NIST-recommended ECC parameters?

elliptic-curves nist backdoors nsa

D.W.

35.5k

asked Sep 9, 2013 at 3:07

114 votes

4 answers

75k views

How should I calculate the entropy of a password?

passwords entropy

this.josh

1,887

asked Aug 11, 2011 at 6:03

94 votes

1 answer

148k views

What is the difference between PKCS#5 padding and PKCS#7 padding

encryption aes block-cipher modes-of-operation padding

Maarten Bodewes♦

85.9k

asked Jul 4, 2013 at 21:18

93 votes

2 answers

24k views

What is the "Random Oracle Model" and why is it controversial?

provable-security random-oracle-model

Fixee

4,008

asked Sep 30, 2011 at 15:38

91 votes

4 answers

42k views

Does Schnorr's 2021 factoring method show that the RSA cryptosystem is not secure?

rsa factoring

Blanco

1,532

asked Mar 3, 2021 at 1:40

89 votes

2 answers

161k views

What is the difference between CBC and GCM mode?

encryption cbc modes-of-operation gcm

Bob Bryan

1,243

asked Apr 8, 2012 at 23:20

86 votes

10 answers

17k views

In end-to-end encryption, doesn't the server need to be trusted?

encryption public-key key-exchange

AV94

979

asked Dec 19, 2017 at 14:30

84 votes

5 answers

274k views

How secure is AES-256?

encryption tls aes

Gustav

1,025

asked Apr 1, 2012 at 16:15

83 votes

9 answers

132k views

Should I use ECB or CBC encryption mode for my block cipher?

encryption block-cipher modes-of-operation cbc ecb

midhunhk

1,141

asked Jul 21, 2011 at 13:19

78 votes

5 answers

36k views

How are primes generated for RSA?

public-key rsa prime-numbers

Vilx-

1,095

asked Mar 1, 2012 at 12:54

77 votes

8 answers

9k views

Layman's explanation of encryption backdoors

encryption terminology backdoors

forthrin

asked Feb 17, 2016 at 12:11

68 votes

4 answers

13k views

Why does the FBI ask Apple for help to decrypt an iPhone?

cryptanalysis key-derivation brute-force-attack

RocketNuts

1,315

asked Feb 18, 2016 at 11:38

61 votes

6 answers

9k views

Soft question: Examples where lack of mathematical rigour cause security breaches?

provable-security history

Snoop Catt

1,297

asked Jun 3, 2019 at 13:35

58 votes

3 answers

48k views

Definition of textbook RSA

rsa public-key cryptanalysis terminology

Bobby S

1,903

asked Dec 12, 2011 at 19:36

58 votes

4 answers

124k views

Difference between stream cipher and block cipher

encryption block-cipher algorithm-design stream-cipher

Ravindra Bagale

761

asked Nov 11, 2012 at 14:18

57 votes

8 answers

59k views

How does asymmetric encryption work?

public-key

Senad Meškin

581

asked Aug 3, 2011 at 10:18

56 votes

2 answers

11k views

Is the software that uses PGP broken, or is it PGP itself?

encryption signature pgp protocol-analysis s-mime

e-sushi

17.4k

asked May 14, 2018 at 17:39

53 votes

5 answers

95k views

What are the chances that AES-256 encryption is cracked?

encryption aes

Jacob Henning

649

asked Apr 12, 2017 at 23:22

53 votes

6 answers

11k views

Kerckhoffs’ principles – Why should I make my cipher public?

cryptanalysis protocol-design algorithm-design terminology

rath

2,526

asked Aug 6, 2013 at 9:17

53 votes

7 answers

11k views

One Encryption, Many Decryption Keys

encryption protocol-design

Justin Bailey

593

asked Aug 16, 2016 at 19:23

52 votes

2 answers

38k views

Why use an Initialization Vector (IV)?

hash block-cipher algorithm-design initialization-vector

Ethan Heilman

2,154

asked Sep 20, 2011 at 14:11

48 votes

8 answers

30k views

Is there a simple hash function that one can compute without a computer?

hash pen-and-paper

FUZxxl

583

asked Sep 23, 2011 at 21:22

42 votes

3 answers

20k views

Why does nobody use (or break) the Camellia Cipher?

aes cryptanalysis block-cipher provable-security camellia

Chris Smith

1,172

asked Aug 20, 2011 at 0:37

42 votes

4 answers

15k views

Cryptography algorithms that take longer to solve on a GPU than a CPU

encryption hash sha-256 algorithm-design

user51749

429

asked Oct 1, 2017 at 20:13

41 votes

5 answers

9k views

In RSA, how does the CPU deal with this huge modulus (8192 bits)?

rsa implementation cpu

artless-person

615

asked May 26, 2016 at 8:55

41 votes

6 answers

20k views

Does RSA work for any message M?

public-key rsa

mikeazo

37.8k

asked Oct 20, 2011 at 19:13

Stack Exchange Network

current community

your communities

more stack exchange communities

464 Bookmarks

Should we MAC-then-encrypt or encrypt-then-MAC?

What are the differences between a digital signature, a MAC and a hash?

Why is elliptic curve cryptography not widely used, compared to RSA?

What is the main difference between a key, an IV and a nonce?

Should we trust the NIST-recommended ECC parameters?

How should I calculate the entropy of a password?

What is the difference between PKCS#5 padding and PKCS#7 padding

What is the "Random Oracle Model" and why is it controversial?

Does Schnorr's 2021 factoring method show that the RSA cryptosystem is not secure?

What is the difference between CBC and GCM mode?

In end-to-end encryption, doesn't the server need to be trusted?

How secure is AES-256?

Should I use ECB or CBC encryption mode for my block cipher?

How are primes generated for RSA?

Layman's explanation of encryption backdoors

Why does the FBI ask Apple for help to decrypt an iPhone?

Soft question: Examples where lack of mathematical rigour cause security breaches?

Definition of textbook RSA

Difference between stream cipher and block cipher

How does asymmetric encryption work?

Is the software that uses PGP broken, or is it PGP itself?

What are the chances that AES-256 encryption is cracked?

Kerckhoffs’ principles – Why should I make my cipher public?

One Encryption, Many Decryption Keys

Why use an Initialization Vector (IV)?

Is there a simple hash function that one can compute without a computer?

Why does nobody use (or break) the Camellia Cipher?

Cryptography algorithms that take longer to solve on a GPU than a CPU

In RSA, how does the CPU deal with this huge modulus (8192 bits)?

Does RSA work for any message M?