User Ilmari Karonen

202

votes

8

answers

94k

views

How much would it cost in U.S. dollars to brute force a 256 bit key in a year?

brute-force-attack

Mar 13 '20 at 6:02 bono_silhouette 11

61

votes

3

answers

88k

views

Why shouldn't I use ECB encryption?

Dec 27 '14 at 19:31 Community♦ 1

41

votes

4

answers

14k

views

Cryptography algorithms that take longer to solve on a GPU than a CPU

encryption hash sha-256 algorithm-design

Oct 3 '17 at 21:54 Community♦ 1

30

votes

5

answers

7k

views

Other than password hashes, are there other uses for non-reversible crypto

hash one-way-function

Dec 7 '18 at 7:47 Community♦ 1

28

votes

2

answers

8k

views

Reason why “XOR” is a linear operation, but ordinary “addition” isn’t?

algorithm-design xor s-boxes linear-cryptanalysis

Jul 13 '16 at 12:36 e-sushi 16.9k

25

votes

2

answers

14k

views

Why should I use Authenticated Encryption instead of just encryption?

encryption modes-of-operation authenticated-encryption

Nov 24 '19 at 21:55 Community♦ 1

24

votes

2

answers

5k

views

Does the Balloon hashing paper deprecate Argon2?

password-hashing argon2 balloon

Feb 16 '19 at 0:56 yanjuna 93

23

votes

6

answers

4k

views

Why not authenticate full-disk encryption?

authentication hmac cbc disk-encryption

Nov 7 '16 at 1:43 Community♦ 1

18

votes

1

answer

772

views

Message-Recovery variant of Ed25519 signature?

ed25519 message-recovery

Apr 17 at 12:07 Tobu 103

15

votes

3

answers

7k

views

What's a cryptographic primitive, really?

algorithm-design terminology

Oct 9 '17 at 17:23 Meir Maor 8,619

15

votes

3

answers

948

views

Does a partial preimage attack imply a preimage attack?

hash preimage-resistance

Apr 10 '19 at 21:29 Maarten Bodewes♦ 77.3k

15

votes

1

answer

691

views

Compact digital signature for noisy data

signature

Dec 14 '16 at 23:14 Community♦ 1

13

votes

3

answers

325

views

Is there a way to optimize a linear scan while preserving anonymity?

protocol-design

Nov 3 '16 at 16:00 Elias 4,569

13

votes

2

answers

5k

views

Is there any strong enough pen-and-paper or mind cipher?

pen-and-paper

Aug 8 '14 at 21:33 Community♦ 1

13

votes

3

answers

1k

views

Counter mode secure hash algorithm

hash algorithm-design collision-resistance

Sep 25 '13 at 17:52 Community♦ 1

13

votes

1

answer

429

views

Can a commutative block cipher be indistinguishable from a random one, assuming a random permutation of keyspace?

block-cipher commutative-encryption

Dec 23 '16 at 9:19 Community♦ 1

12

votes

2

answers

753

views

How can we distribute Shamir's secret sharing scheme shares without a dealer?

Jul 1 '18 at 18:30 Erik Aronesty 347

11

votes

1

answer

352

views

What was the BassOmatic cipher, and what made it so weak?

cryptanalysis symmetric pgp history

Feb 22 at 17:28 Patriot 2,321

10

votes

7

answers

956

views

Does humanly verifiable one time pad authentication exist?

authentication one-time-pad

Jun 30 at 9:15 AleksanderRas 6,040

9

votes

1

answer

1k

views

What is the original SKID3 protocol?

protocol-design authentication symmetric reference-request

Feb 27 '17 at 18:59 Maarten Bodewes♦ 77.3k

9

votes

1

answer

2k

views

How can I attack a Triple-Block cipher with 2 keys (like 3DES) with a cost of ≤ 2⁵⁶

block-cipher attack 3des man-in-the-middle

Dec 21 '16 at 12:30 Community♦ 1

9

votes

1

answer

558

views

Is there a signature scheme in which private keys can't be linked to their signatures?

public-key signature

Oct 2 '16 at 15:31 Community♦ 1

9

votes

1

answer

657

views

Why does the WhatsApp protocol require elaborate computation when verifying user keys?

hash authentication protocol-analysis

Jan 20 '17 at 11:37 Mark 645

9

votes

4

answers

2k

views

Which risks are associated with deriving multiple keys from the same DH secret Z?

diffie-hellman key-derivation hmac hkdf

Sep 12 '19 at 19:46 D.W. 34.5k

9

votes

1

answer

315

views

Any problems with this secure time synchronization scheme?

protocol-design

Sep 3 '13 at 15:22 Ilmari Karonen 42k

9

votes

3

answers

321

views

How hard is to invert the function that computes the middle-bits of (x^2)?

one-way-function function-evaluation

Dec 9 '13 at 17:25 D.W. 34.5k

9

votes

1

answer

409

views

Verifiable, Distributed Secret Santa Assignments

Nov 13 '14 at 21:31 Mark 136

8

votes

2

answers

1k

views

Proof that perfect privacy implies that the number of keys is at least the number of messages

encryption provable-security perfect-secrecy

Jul 9 '16 at 12:39 Community♦ 1

8

votes

0

answers

547

views

LT codes with Homomorphic hashing

hash homomorphic-encryption

Apr 29 '13 at 13:13 Gilles 'SO- stop being evil' 13.9k

8

votes

2

answers

3k

views

Have I understood pedersen commitment correctly?

protocol-design commitments

May 4 '13 at 22:03 Community♦ 1

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

177 Bookmarks

How much would it cost in U.S. dollars to brute force a 256 bit key in a year?

Why shouldn't I use ECB encryption?

Cryptography algorithms that take longer to solve on a GPU than a CPU

Other than password hashes, are there other uses for non-reversible crypto

Reason why “XOR” is a linear operation, but ordinary “addition” isn’t?

Why should I use Authenticated Encryption instead of just encryption?

Does the Balloon hashing paper deprecate Argon2?

Why not authenticate full-disk encryption?

Message-Recovery variant of Ed25519 signature?

What's a cryptographic primitive, really?

Does a partial preimage attack imply a preimage attack?

Compact digital signature for noisy data

Is there a way to optimize a linear scan while preserving anonymity?

Is there any strong enough pen-and-paper or mind cipher?

Counter mode secure hash algorithm

Can a commutative block cipher be indistinguishable from a random one, assuming a random permutation of keyspace?

How can we distribute Shamir's secret sharing scheme shares without a dealer?

What was the BassOmatic cipher, and what made it so weak?

Does humanly verifiable one time pad authentication exist?

What is the original SKID3 protocol?

How can I attack a Triple-Block cipher with 2 keys (like 3DES) with a cost of ≤ 2⁵⁶

Is there a signature scheme in which private keys can't be linked to their signatures?

Why does the WhatsApp protocol require elaborate computation when verifying user keys?

Which risks are associated with deriving multiple keys from the same DH secret Z?

Any problems with this secure time synchronization scheme?

How hard is to invert the function that computes the middle-bits of (x^2)?

Verifiable, Distributed Secret Santa Assignments

Proof that perfect privacy implies that the number of keys is at least the number of messages

LT codes with Homomorphic hashing

Have I understood pedersen commitment correctly?