user avatar
user avatar
user avatar
Samuel Neves
  • Member for 10 years, 10 months
  • Last seen this week
50 votes

When using Curve25519, why does the private key always have a fixed bit at 2^254?

43 votes
Accepted

How was this 2048 bit number factored so fast?

35 votes
Accepted

How long does it take to crack DES and AES?

34 votes
Accepted

What is so special about elliptic curves?

25 votes
Accepted

Why are the lower 3 bits of curve25519/ed25519 secret keys cleared during creation?

21 votes
Accepted

Edwards / Montgomery ECC with Weierstrass Implementation?

20 votes
Accepted

Why would anyone use an elliptic curve with a cofactor > 1?

20 votes
Accepted

Distinguishing x25519 public keys from random?

18 votes
Accepted

Are safe primes $p=2^k \pm s$ with $s$ small less recommandable than others as a discrete log modulus?

17 votes
Accepted

Do recent announcements about solving the DLP in $GF(2^{6120})$ apply to schemes proposed for cryptographic use?

15 votes
Accepted

How robust is discrete logarithm in $GF(2^n)$?

15 votes

Why is public-key encryption so much less efficient than secret-key encryption?

14 votes
Accepted

Why doesn't CTR mode require blocking?

14 votes
Accepted

How is HMAC(message,key) more secure than Hash(key1+message+key2)

13 votes
Accepted

Need for 3 rounds in Luby Rackoff theorem

13 votes

Can ECDSA signatures be safely made "deterministic"?

13 votes
Accepted

Why does the crypto_box functionality in NaCl library expose the nonce to the programmer?

12 votes
Accepted

Logjam on Elliptic Curves?

12 votes
Accepted

How to solve this ECDLP?

12 votes
Accepted

Who is the inventor of the OFB block cipher mode of operation?

11 votes
Accepted

RSA given n % (q-1)

11 votes
Accepted

Trying to better understand the failure of the Index Calculus for ECDLP

11 votes

Known methods for constant time (table-free) AES implementation using 'standard' operations?

10 votes
Accepted

Is knowing the private key of RSA equivalent to the factorization of $N$?

10 votes

Introduction to LLL algorithm applied to linear modular inequalities

9 votes
Accepted

Breaking RSA with Factor in Range of $\sqrt{N}$

9 votes
Accepted

curve25519 weak points for contributory behaviour

9 votes
Accepted

Why is this authentication procedure using Rabin crypto not useful?

9 votes
Accepted

counting points on elliptic curve

9 votes
Accepted

Is there any reason not to use Single-Key EM with AES and a constant key?

1
2 3 4 5