User Ilmari Karonen

11

votes

1

answer

352

views

What was the BassOmatic cipher, and what made it so weak?

Feb 22 at 17:28 Patriot 2,321

6

votes

1

answer

209

views

Why doesn't “Classic McEliece” need scrambling?

post-quantum-cryptography coding-theory mceliece niederreiter

Feb 17 at 22:00 Patriot 2,321

7

votes

0

answers

213

views

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

history rabin-cryptosystem

Feb 9 at 2:48 forest 11.5k

2

votes

2

answers

150

views

Optimal memory-hard KDF parameters when faced with small, slow memory

key-derivation argon2 memory-hard

Feb 9 at 2:12 forest 11.5k

5

votes

1

answer

586

views

Ring Signature - paper/code difference in trying to solve inverse trapdoor function?

rsa public-key signature trapdoor

Feb 4 at 13:48 Patriot 2,321

2

votes

1

answer

82

views

Mixing Autokey with Regular Vignere

cryptanalysis classical-cipher vigenere

Jan 25 at 11:30 Patriot 2,321

8

votes

3

answers

2k

views

Are there MD5 collisions for inputs of different length?

hash collision-resistance md5

Jan 25 at 10:57 fgrieu♦ 110k

3

votes

2

answers

155

views

How to determine which type of transposition cipher I have?

cryptanalysis classical-cipher transposition-cipher

Jan 23 at 10:00 Crypto 103

5

votes

1

answer

529

views

XOR instead of Multiplication in ElGamal encryption

encryption public-key diffie-hellman key-exchange elgamal-encryption

Nov 19 at 10:27 Examiner 1

0

votes

5

answers

385

views

Is there any existing cipher capable of scaling from a 1 bit key up to a one-time-pad?

symmetric key-size

Nov 9 at 18:02 Community♦ 1

4

votes

2

answers

294

views

How hard is it to find plaintexts whose hashes satisfy $h(a)\oplus h(b)=h(c)$?

hash collision-resistance xor

Oct 10 at 12:01 Fractalice 1,863

2

votes

1

answer

326

views

How can I generate cryptographic-quality 1/f noise, aka “pink noise”?

random-number-generator pseudo-random-function random-noise

Sep 17 at 8:24 SEJPM♦ 42.4k

2

votes

1

answer

473

views

Alter plaintext through IV in block cipher AES in CBC mode

aes cbc initialization-vector

Jul 7 at 22:03 Community♦ 1

10

votes

7

answers

956

views

Does humanly verifiable one time pad authentication exist?

authentication one-time-pad

Jun 30 at 9:15 AleksanderRas 6,040

18

votes

1

answer

772

views

Message-Recovery variant of Ed25519 signature?

ed25519 message-recovery

Apr 17 at 12:07 Tobu 103

5

votes

3

answers

645

views

Nonce-misuse-resistance scheme applied after the fact to AES-GCM for defense in depth?

algorithm-design modes-of-operation gcm semantic-security transport-security

Mar 22 '20 at 18:23 hardyrama 1,910

202

votes

8

answers

94k

views

How much would it cost in U.S. dollars to brute force a 256 bit key in a year?

brute-force-attack

Mar 13 '20 at 6:02 bono_silhouette 11

1

vote

0

answers

92

views

Cracking a Shift Cipher that uses an Unknown Deterministic Scheduling Algorithm

substitution-cipher

Feb 28 '20 at 3:22 Dovi Salomon 11

0

votes

1

answer

81

views

Is there an efficient algorithm that allows to obtain a uniform distribution of all possible $4$-bit permutations from a single keyless $4$-bit S-Box?

algorithm-design permutation

Jan 27 '20 at 14:51 Charlie 11

8

votes

2

answers

808

views

Perfect shuffle possible with limited raw entropy?

random-number-generator randomness pseudo-random-generator

Dec 31 '19 at 16:12 fgrieu♦ 110k

1

vote

1

answer

115

views

Encrypt data. Create 5 keys. Just 3 keys are needed for decryption

Nov 29 '19 at 16:56 Ilmari Karonen 42k

2

votes

1

answer

296

views

Why is this voting system not secure?

provable-security voting key-distribution

Nov 26 '19 at 23:31 Paul Uszak 12k

25

votes

2

answers

14k

views

Why should I use Authenticated Encryption instead of just encryption?

encryption modes-of-operation authenticated-encryption

Nov 24 '19 at 21:55 Community♦ 1

1

vote

0

answers

127

views

Decryption of RSA with e that has no inverse

rsa decryption

Nov 12 '19 at 22:55 kelalaka 32.7k

2

votes

3

answers

344

views

What's wrong with this digital signature scheme?

signature protocol-design forgery

Oct 24 '19 at 3:54 DannyNiu 4,566

6

votes

2

answers

1k

views

Is there another resource for Carter-Wegman-style message authentication?

hash authentication reference-request carter-wegman

Oct 2 '19 at 15:32 Krystian 592

2

votes

0

answers

43

views

Is there a way to make a non-specific algorithm to decypher substitutions with “anti-frequency analysis” measures?

classical-cipher substitution-cipher frequency-analysis

Oct 2 '19 at 7:51 Teleporting Goat 121

5

votes

1

answer

828

views

What is an accurate definition for a 'Monoalphabetic substitution cipher' and why does it provide a poor level of security

terminology substitution-cipher

Sep 30 '19 at 9:31 Patriot 2,321

9

votes

4

answers

2k

views

Which risks are associated with deriving multiple keys from the same DH secret Z?

diffie-hellman key-derivation hmac hkdf

Sep 12 '19 at 19:46 D.W. 34.5k

5

votes

1

answer

704

views

AES-XTS vs AES-CTR for Write Once Storage

aes ctr xts

Sep 1 '19 at 11:02 Community♦ 1

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

177 Bookmarks

What was the BassOmatic cipher, and what made it so weak?

Why doesn't “Classic McEliece” need scrambling?

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

Optimal memory-hard KDF parameters when faced with small, slow memory

Ring Signature - paper/code difference in trying to solve inverse trapdoor function?

Mixing Autokey with Regular Vignere

Are there MD5 collisions for inputs of different length?

How to determine which type of transposition cipher I have?

XOR instead of Multiplication in ElGamal encryption

Is there any existing cipher capable of scaling from a 1 bit key up to a one-time-pad?

How hard is it to find plaintexts whose hashes satisfy $h(a)\oplus h(b)=h(c)$?

How can I generate cryptographic-quality 1/f noise, aka “pink noise”?

Alter plaintext through IV in block cipher AES in CBC mode

Does humanly verifiable one time pad authentication exist?

Message-Recovery variant of Ed25519 signature?

Nonce-misuse-resistance scheme applied after the fact to AES-GCM for defense in depth?

How much would it cost in U.S. dollars to brute force a 256 bit key in a year?

Cracking a Shift Cipher that uses an Unknown Deterministic Scheduling Algorithm

Is there an efficient algorithm that allows to obtain a uniform distribution of all possible $4$-bit permutations from a single keyless $4$-bit S-Box?

Perfect shuffle possible with limited raw entropy?

Encrypt data. Create 5 keys. Just 3 keys are needed for decryption

Why is this voting system not secure?

Why should I use Authenticated Encryption instead of just encryption?

Decryption of RSA with e that has no inverse

What's wrong with this digital signature scheme?

Is there another resource for Carter-Wegman-style message authentication?

Is there a way to make a non-specific algorithm to decypher substitutions with “anti-frequency analysis” measures?

What is an accurate definition for a 'Monoalphabetic substitution cipher' and why does it provide a poor level of security

Which risks are associated with deriving multiple keys from the same DH secret Z?

AES-XTS vs AES-CTR for Write Once Storage