User Ilmari Karonen

202

votes

8

answers

94k

views

How much would it cost in U.S. dollars to brute force a 256 bit key in a year?

brute-force-attack

Mar 13 '20 at 6:02 bono_silhouette 11

61

votes

3

answers

88k

views

Why shouldn't I use ECB encryption?

Dec 27 '14 at 19:31 Community♦ 1

41

votes

4

answers

14k

views

Cryptography algorithms that take longer to solve on a GPU than a CPU

encryption hash sha-256 algorithm-design

Oct 3 '17 at 21:54 Community♦ 1

25

votes

2

answers

14k

views

Why should I use Authenticated Encryption instead of just encryption?

encryption modes-of-operation authenticated-encryption

Nov 24 '19 at 21:55 Community♦ 1

28

votes

2

answers

8k

views

Reason why “XOR” is a linear operation, but ordinary “addition” isn’t?

algorithm-design xor s-boxes linear-cryptanalysis

Jul 13 '16 at 12:36 e-sushi 16.9k

30

votes

5

answers

7k

views

Other than password hashes, are there other uses for non-reversible crypto

hash one-way-function

Dec 7 '18 at 7:47 Community♦ 1

15

votes

3

answers

7k

views

What's a cryptographic primitive, really?

algorithm-design terminology

Oct 9 '17 at 17:23 Meir Maor 8,619

24

votes

2

answers

5k

views

Does the Balloon hashing paper deprecate Argon2?

password-hashing argon2 balloon

Feb 16 '19 at 0:56 yanjuna 93

13

votes

2

answers

5k

views

Is there any strong enough pen-and-paper or mind cipher?

pen-and-paper

Aug 8 '14 at 21:33 Community♦ 1

4

votes

2

answers

5k

views

Encryption for a short packet size

encryption aes protocol-design modes-of-operation salsa20

Jan 6 '15 at 12:36 Ilmari Karonen 42k

23

votes

6

answers

4k

views

Why not authenticate full-disk encryption?

authentication hmac cbc disk-encryption

Nov 7 '16 at 1:43 Community♦ 1

6

votes

3

answers

4k

views

Which of these 3 AES 128 symmetric encrypt/decrypt routines is most secure?

encryption aes symmetric hmac database

Mar 11 '16 at 10:18 Maarten Bodewes♦ 77.3k

7

votes

2

answers

4k

views

Whats the deal with argon2?

hash password-hashing argon2

Mar 21 '17 at 18:36 Community♦ 1

-1

votes

1

answer

3k

views

How to perform the padding oracle attack on AES CBC?

aes block-cipher cbc padding padding-oracle

May 30 '18 at 20:05 Community♦ 1

4

votes

3

answers

3k

views

Password-based cipher with fast encryption

password-based-encryption

Nov 13 '17 at 6:51 fgrieu♦ 110k

6

votes

2

answers

3k

views

Is the CBC mode of operation a stream cipher mode?

block-cipher stream-cipher cbc modes-of-operation

Mar 4 '19 at 5:11 Community♦ 1

8

votes

2

answers

3k

views

Have I understood pedersen commitment correctly?

protocol-design commitments

May 4 '13 at 22:03 Community♦ 1

4

votes

8

answers

3k

views

How to convert a set of sequential integers into a set of unique random numbers?

randomness

Oct 19 '16 at 10:25 Community♦ 1

8

votes

1

answer

2k

views

Recommended way of adding a pepper/secret key to password before hashing?

hash passwords

May 8 '13 at 22:16 Community♦ 1

3

votes

2

answers

2k

views

What is a good AES mode to use on file encryption?

aes file-encryption

Jan 11 '19 at 0:03 Ella Rose 18.8k

4

votes

1

answer

2k

views

Why no swapping block in the last round of DES?

encryption des

Aug 27 '13 at 12:22 Community♦ 1

8

votes

1

answer

2k

views

Replay attack prevention in connectionless UDP encrypted communication

protocol-design hmac sha-256 replay-attack embedded

Oct 25 '16 at 19:26 Community♦ 1

6

votes

3

answers

2k

views

Convert old and busted password encryption to something sensible

authentication

Aug 25 '13 at 14:39 Community♦ 1

6

votes

4

answers

2k

views

The difference between MACs vs. HMACs vs. PRFs

hmac tls mac pseudo-random-function

Sep 4 '17 at 1:53 Squeamish Ossifrage 42.9k

2

votes

2

answers

2k

views

Optimising Pollard's Rho algorithm for large semi-primes

factoring

Oct 31 '12 at 12:16 D.W. 34.5k

9

votes

1

answer

2k

views

How can I attack a Triple-Block cipher with 2 keys (like 3DES) with a cost of ≤ 2⁵⁶

block-cipher attack 3des man-in-the-middle

Dec 21 '16 at 12:30 Community♦ 1

8

votes

3

answers

2k

views

Are there MD5 collisions for inputs of different length?

hash collision-resistance md5

Jan 25 at 10:57 fgrieu♦ 110k

4

votes

1

answer

2k

views

Discrete logarithm problem is easy in a cyclic group of order a power of two

reference-request discrete-logarithm group-theory

Apr 2 '16 at 16:55 J.D. 4,195

9

votes

4

answers

2k

views

Which risks are associated with deriving multiple keys from the same DH secret Z?

diffie-hellman key-derivation hmac hkdf

Sep 12 '19 at 19:46 D.W. 34.5k

4

votes

1

answer

2k

views

Diffusion in Stream Cipher

algorithm-design stream-cipher

Dec 28 '14 at 6:11 e-sushi 16.9k

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

177 Bookmarks

How much would it cost in U.S. dollars to brute force a 256 bit key in a year?

Why shouldn't I use ECB encryption?

Cryptography algorithms that take longer to solve on a GPU than a CPU

Why should I use Authenticated Encryption instead of just encryption?

Reason why “XOR” is a linear operation, but ordinary “addition” isn’t?

Other than password hashes, are there other uses for non-reversible crypto

What's a cryptographic primitive, really?

Does the Balloon hashing paper deprecate Argon2?

Is there any strong enough pen-and-paper or mind cipher?

Encryption for a short packet size

Why not authenticate full-disk encryption?

Which of these 3 AES 128 symmetric encrypt/decrypt routines is most secure?

Whats the deal with argon2?

How to perform the padding oracle attack on AES CBC?

Password-based cipher with fast encryption

Is the CBC mode of operation a stream cipher mode?

Have I understood pedersen commitment correctly?

How to convert a set of sequential integers into a set of unique random numbers?

Recommended way of adding a pepper/secret key to password before hashing?

What is a good AES mode to use on file encryption?

Why no swapping block in the last round of DES?

Replay attack prevention in connectionless UDP encrypted communication

Convert old and busted password encryption to something sensible

The difference between MACs vs. HMACs vs. PRFs

Optimising Pollard's Rho algorithm for large semi-primes

How can I attack a Triple-Block cipher with 2 keys (like 3DES) with a cost of ≤ 2⁵⁶

Are there MD5 collisions for inputs of different length?

Discrete logarithm problem is easy in a cyclic group of order a power of two

Which risks are associated with deriving multiple keys from the same DH secret Z?

Diffusion in Stream Cipher