User Ilmari Karonen

4

votes

2

answers

133

views

How to determine which type of transposition cipher I have?

1d ago Crypto 103

7

votes

1

answer

182

views

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

history rabin-cryptosystem

Jan 9 at 10:06 mehdi mahdavi oliaiy 51

5

votes

1

answer

526

views

XOR instead of Multiplication in ElGamal encryption

encryption public-key diffie-hellman key-exchange elgamal-encryption

Nov 19 at 10:27 Examiner 1

0

votes

5

answers

381

views

Is there any existing cipher capable of scaling from a 1 bit key up to a one-time-pad?

symmetric key-size

Nov 9 at 18:02 Community♦ 1

4

votes

2

answers

294

views

How hard is it to find plaintexts whose hashes satisfy $h(a)\oplus h(b)=h(c)$?

hash collision-resistance xor

Oct 10 at 12:01 Fractalic 1,745

2

votes

1

answer

320

views

How can I generate cryptographic-quality 1/f noise, aka “pink noise”?

random-number-generator pseudo-random-function random-noise

Sep 17 at 8:24 SEJPM♦ 41.6k

2

votes

1

answer

436

views

Alter plaintext through IV in block cipher AES in CBC mode

aes cbc initialization-vector

Jul 7 at 22:03 Community♦ 1

10

votes

7

answers

939

views

Does humanly verifiable one time pad authentication exist?

authentication one-time-pad

Jun 30 at 9:15 AleksanderRas 5,950

18

votes

1

answer

767

views

Message-Recovery variant of Ed25519 signature?

ed25519 message-recovery

Apr 17 at 12:07 Tobu 103

6

votes

3

answers

629

views

Nonce-misuse-resistance scheme applied after the fact to AES-GCM for defense in depth?

algorithm-design modes-of-operation gcm semantic-security transport-security

Mar 22 at 18:23 hardyrama 1,900

203

votes

8

answers

93k

views

How much would it cost in U.S. dollars to brute force a 256 bit key in a year?

brute-force-attack

Mar 13 at 6:02 bono_silhouette 31

1

vote

0

answers

72

views

Cracking a Shift Cipher that uses an Unknown Deterministic Scheduling Algorithm

substitution-cipher

Feb 28 '20 at 3:22 Dovi Salomon 11

0

votes

1

answer

81

views

Is there an efficient algorithm that allows to obtain a uniform distribution of all possible $4$-bit permutations from a single keyless $4$-bit S-Box?

algorithm-design permutation

Jan 27 '20 at 14:51 Charlie 11

8

votes

2

answers

787

views

Perfect shuffle possible with limited raw entropy?

random-number-generator randomness pseudo-random-generator

Dec 31 '19 at 16:12 fgrieu♦ 109k

1

vote

1

answer

110

views

Encrypt data. Create 5 keys. Just 3 keys are needed for decryption

Nov 29 '19 at 16:56 Ilmari Karonen 41.6k

2

votes

1

answer

294

views

Why is this voting system not secure?

provable-security voting key-distribution

Nov 26 '19 at 23:31 Paul Uszak 11.7k

25

votes

2

answers

13k

views

Why should I use Authenticated Encryption instead of just encryption?

encryption modes-of-operation authenticated-encryption

Nov 24 '19 at 21:55 Community♦ 1

1

vote

0

answers

111

views

Decryption of RSA with e that has no inverse

rsa decryption

Nov 12 '19 at 22:55 kelalaka 29.6k

2

votes

2

answers

130

views

Optimal memory-hard KDF parameters when faced with small, slow memory

key-derivation argon2 memory-hard

Oct 24 '19 at 10:02 Community♦ 1

2

votes

3

answers

339

views

What's wrong with this digital signature scheme?

signature protocol-design forgery

Oct 24 '19 at 3:54 DannyNiu 4,260

6

votes

2

answers

1k

views

Is there another resource for Carter-Wegman-style message authentication?

hash authentication reference-request carter-wegman

Oct 2 '19 at 15:32 Krystian 602

2

votes

0

answers

42

views

Is there a way to make a non-specific algorithm to decypher substitutions with “anti-frequency analysis” measures?

classical-cipher substitution-cipher frequency-analysis

Oct 2 '19 at 7:51 Teleporting Goat 121

6

votes

1

answer

786

views

What is an accurate definition for a 'Monoalphabetic substitution cipher' and why does it provide a poor level of security

terminology substitution-cipher

Sep 30 '19 at 9:31 Patriot 1,978

9

votes

4

answers

2k

views

Which risks are associated with deriving multiple keys from the same DH secret Z?

diffie-hellman key-derivation hmac hkdf

Sep 12 '19 at 19:46 D.W. 34.4k

5

votes

1

answer

667

views

AES-XTS vs AES-CTR for Write Once Storage

aes ctr xts

Sep 1 '19 at 11:02 Community♦ 1

1

vote

1

answer

104

views

collision resistance of a composed hash function

hash collision-resistance stream-cipher

Aug 28 '19 at 1:56 Squeamish Ossifrage 42.5k

7

votes

0

answers

96

views

FPE current state of art for “small” domains

cryptanalysis format-preserving

Jul 26 '19 at 22:29 R1w 1,596

8

votes

0

answers

154

views

Are there conventions for signing JSON as a tree, to allow proofs of signed subtrees?

signature protocol-design hash-tree jws

Jul 26 '19 at 18:24 R1w 1,596

3

votes

1

answer

226

views

Does anyone sell a proprietary symmetric encryption alogirthm?

encryption symmetric stream-cipher

Jul 18 '19 at 8:28 kodlu 13.2k

3

votes

2

answers

571

views

Setting MAC field to all-zero to indicate unencrypted data

mac

Jul 11 '19 at 15:11 Maarten Bodewes♦ 76.4k

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

177 Bookmarks

How to determine which type of transposition cipher I have?

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

XOR instead of Multiplication in ElGamal encryption

Is there any existing cipher capable of scaling from a 1 bit key up to a one-time-pad?

How hard is it to find plaintexts whose hashes satisfy $h(a)\oplus h(b)=h(c)$?

How can I generate cryptographic-quality 1/f noise, aka “pink noise”?

Alter plaintext through IV in block cipher AES in CBC mode

Does humanly verifiable one time pad authentication exist?

Message-Recovery variant of Ed25519 signature?

Nonce-misuse-resistance scheme applied after the fact to AES-GCM for defense in depth?

How much would it cost in U.S. dollars to brute force a 256 bit key in a year?

Cracking a Shift Cipher that uses an Unknown Deterministic Scheduling Algorithm

Is there an efficient algorithm that allows to obtain a uniform distribution of all possible $4$-bit permutations from a single keyless $4$-bit S-Box?

Perfect shuffle possible with limited raw entropy?

Encrypt data. Create 5 keys. Just 3 keys are needed for decryption

Why is this voting system not secure?

Why should I use Authenticated Encryption instead of just encryption?

Decryption of RSA with e that has no inverse

Optimal memory-hard KDF parameters when faced with small, slow memory

What's wrong with this digital signature scheme?

Is there another resource for Carter-Wegman-style message authentication?

Is there a way to make a non-specific algorithm to decypher substitutions with “anti-frequency analysis” measures?

What is an accurate definition for a 'Monoalphabetic substitution cipher' and why does it provide a poor level of security

Which risks are associated with deriving multiple keys from the same DH secret Z?

AES-XTS vs AES-CTR for Write Once Storage

collision resistance of a composed hash function

FPE current state of art for “small” domains

Are there conventions for signing JSON as a tree, to allow proofs of signed subtrees?

Does anyone sell a proprietary symmetric encryption alogirthm?

Setting MAC field to all-zero to indicate unencrypted data