User Paŭlo Ebermann

64 votes

Accepted

What makes a hash function good for password hashing?

answered Jul 12, 2011 at 20:29

54 votes

Accepted

Why is AES resistant to known-plaintext attacks?

answered Dec 20, 2011 at 21:11

49 votes

What are the practical differences between 256-bit, 192-bit, and 128-bit AES encryption?

answered Dec 21, 2011 at 23:33

48 votes

Accepted

Can one generalize the Diffie-Hellman key exchange to three or more parties?

answered Oct 21, 2011 at 22:53

47 votes

Accepted

Why is $H(k\mathbin\Vert x)$ not a secure MAC construction?

answered Oct 26, 2011 at 21:42

44 votes

Accepted

Difference between stream cipher and block cipher

answered Nov 11, 2012 at 15:32

43 votes

Accepted

What are preimage resistance and collision resistance, and how can the lack thereof be exploited?

answered Nov 12, 2011 at 2:28

39 votes

Accepted

What is the relation between Discrete Log, Computational Diffie-Hellman and Decisional Diffie-Hellman?

answered Dec 16, 2011 at 21:07

37 votes

Are there two known strings which have the same MD5 hash value?

answered Dec 11, 2011 at 14:40

30 votes

Is Diffie-Hellman mathematically the same as RSA?

answered Sep 27, 2011 at 16:46

27 votes

Accepted

Can CBC ciphertext be decrypted if the key is known, but the IV not?

answered Nov 5, 2011 at 22:42

26 votes

Accepted

Why is it insecure to use a randomized IV for CBC-MAC instead of an all-zero IV?

answered Oct 22, 2011 at 22:04

26 votes

Accepted

Is HTTPS secure if someone snoops the initial handshake?

answered Aug 3, 2011 at 16:58

23 votes

Accepted

How secure is the Bitcoin protocol?

answered Aug 3, 2011 at 22:37

23 votes

Accepted

Why are elliptic curve variants of RSA "chiefly of academic interest"?

answered Oct 5, 2012 at 19:14

22 votes

Accepted

Why is MixColumns omitted from the last round of AES?

answered Nov 29, 2011 at 20:48

21 votes

Is HMAC-DRBG or Hash-DRBG stronger?

answered Dec 4, 2011 at 15:14

21 votes

Accepted

Does AES have any fixed-points?

answered Oct 15, 2011 at 2:07

20 votes

Accepted

Is it feasible to build a stream cipher from a cryptographic hash function?

answered Jul 13, 2011 at 17:03

20 votes

Accepted

Why is Diffie-Hellman considered in the context of public key cryptography?

answered Feb 10, 2013 at 18:13

18 votes

Accepted

Need an introduction to SPKI (or "SPKI for dummies")

answered Sep 27, 2011 at 2:04

18 votes

Accepted

How does the key schedule of Rijndael looks for keysizes other than 128 bit?

answered Apr 30, 2012 at 16:28

17 votes

Accepted

What is wrong with using SHA1 in digital signatures? Why is a robust hash function needed?

answered Sep 28, 2011 at 19:26

16 votes

Accepted

How does one calculate the scalar multiplication on elliptic curves?

answered Sep 30, 2012 at 15:12

15 votes

What is a hard-core predicate?

answered Oct 28, 2011 at 18:29

15 votes

Accepted

Salting when encrypting?

answered Jul 12, 2011 at 23:05

15 votes

Accepted

How does GPG verify succesful decryption?

answered Dec 14, 2011 at 18:17

15 votes

Accepted

Strength of multiple hash iterations?

answered Oct 12, 2011 at 18:00

14 votes

Accepted

Big-O Notation: Encryption Algorithms

answered Apr 10, 2012 at 20:08

14 votes

Accepted

How to use RCON In Key Expansion of 128 Bit Advanced Encryption Standard

answered Apr 21, 2012 at 17:35

Stack Exchange Network

233 Answers

What makes a hash function good for password hashing?

Why is AES resistant to known-plaintext attacks?

What are the practical differences between 256-bit, 192-bit, and 128-bit AES encryption?

Can one generalize the Diffie-Hellman key exchange to three or more parties?

Why is $H(k\mathbin\Vert x)$ not a secure MAC construction?

Difference between stream cipher and block cipher

What are preimage resistance and collision resistance, and how can the lack thereof be exploited?

What is the relation between Discrete Log, Computational Diffie-Hellman and Decisional Diffie-Hellman?

Are there two known strings which have the same MD5 hash value?

Is Diffie-Hellman mathematically the same as RSA?

Can CBC ciphertext be decrypted if the key is known, but the IV not?

Why is it insecure to use a randomized IV for CBC-MAC instead of an all-zero IV?

Is HTTPS secure if someone snoops the initial handshake?

How secure is the Bitcoin protocol?

Why are elliptic curve variants of RSA "chiefly of academic interest"?

Why is MixColumns omitted from the last round of AES?

Is HMAC-DRBG or Hash-DRBG stronger?

Does AES have any fixed-points?

Is it feasible to build a stream cipher from a cryptographic hash function?

Why is Diffie-Hellman considered in the context of public key cryptography?

Need an introduction to SPKI (or "SPKI for dummies")

How does the key schedule of Rijndael looks for keysizes other than 128 bit?

What is wrong with using SHA1 in digital signatures? Why is a robust hash function needed?

How does one calculate the scalar multiplication on elliptic curves?

What is a hard-core predicate?

Salting when encrypting?

How does GPG verify succesful decryption?

Strength of multiple hash iterations?

Big-O Notation: Encryption Algorithms

How to use RCON In Key Expansion of 128 Bit Advanced Encryption Standard