Profile Activity

Ilmari Karonen

Meta user

Network profile

Reputation

39,837

39.8k
29.2k
18.6k

2017
2018
2019
2020

Next tag badge

initialization-vector

267/100 score

19/20 answers

Badges

158

Newest

Good Answer

Next badge

397/500

Impact

397 posts edited

105 helpful flags

4,778 votes cast

Summary Answers Questions Tags Badges Favorites Bounties Reputation All actions

173 Favorites

Added Views Newest Activity Votes

votes

answers

695

views

Perfect shuffle possible with limited raw entropy?

Dec 31 at 16:12 fgrieu 95.5k

vote

answer

views

Encrypt data. Create 5 keys. Just 3 keys are needed for decryption

Nov 29 at 16:56 Ilmari Karonen 39.8k

votes

answer

230

views

Why is this voting system not secure?

provable-security voting key-distribution

Nov 26 at 23:31 Paul Uszak 1

votes

answers

10k

views

Why should I use Authenticated Encryption instead of just encryption?

encryption modes-of-operation authenticated-encryption

Nov 24 at 21:55 Maarten Bodewes♦ 66.4k

vote

answers

views

Decryption of RSA with e that has no inverse

rsa decryption

Nov 12 at 22:55 kelalaka 15.8k

vote

answer

233

views

Alter plaintext through IV in block cipher AES in CBC mode

aes cbc initialization-vector

Nov 10 at 21:01 Community♦ 1

votes

answers

views

Optimal memory-hard KDF parameters when faced with small, slow memory

key-derivation argon2 memory-hard

Oct 24 at 10:02 Community♦ 1

votes

answers

273

views

What's wrong with this digital signature scheme?

signature protocol-design forgery

Oct 24 at 3:54 DannyNiu 2,766

votes

answers

292

views

Is there any existing cipher capable of scaling from a 1 bit key up to a one-time-pad?

symmetric key-size

Oct 16 at 1:02 Community♦ 1

votes

answers

views

Is there another resource for Carter-Wegman-style message authentication?

hash authentication reference-request carter-wegman

Oct 2 at 15:32 Krystian 390

votes

answers

views

Is there a way to make a non-specific algorithm to decypher substitutions with “anti-frequency analysis” measures?

classical-cipher substitution-cipher frequency-analysis

Oct 2 at 7:51 Teleporting Goat 121

votes

answer

351

views

What is an accurate definition for a 'Monoalphabetic substitution cipher' and why does it provide a poor level of security

terminology substitution-cipher

Sep 30 at 9:31 Patriot 1,693

votes

answers

views

Which risks are associated with deriving multiple keys from the same DH secret Z?

diffie-hellman key-derivation hmac hkdf

Sep 12 at 19:46 D.W. 33.4k

votes

answers

416

views

Nonce-misuse-resistance scheme applied after the fact to AES-GCM for defense in depth?

algorithm-design modes-of-operation gcm semantic-security transport-security

Sep 6 at 0:35 Squeamish Ossifrage 39.8k

votes

answer

360

views

AES-XTS vs AES-CTR for Write Once Storage

aes ctr xts

Sep 1 at 11:02 Community♦ 1

vote

answer

views

collision resistance of a composed hash function

hash collision-resistance stream-cipher

Aug 28 at 1:56 Squeamish Ossifrage 39.8k

votes

answers

143

views

Are there conventions for signing JSON as a tree, to allow proofs of signed subtrees?

signature protocol-design hash-tree jws

Jul 26 at 18:24 R1w 1,412

votes

answer

165

views

Does anyone sell a proprietary symmetric encryption alogirthm?

encryption symmetric stream-cipher

Jul 18 at 8:28 kodlu 11.2k

votes

answers

567

views

Setting MAC field to all-zero to indicate unencrypted data

mac

Jul 11 at 15:11 Maarten Bodewes♦ 66.4k

votes

answers

180

views

Hashing a hash for authentication

authentication key-derivation sha-256

Jun 7 at 22:12 Ilmari Karonen 39.8k

vote

answers

views

Meet-in-the-middle attack (on custom encryption scheme) [duplicate]

cbc des ecb meet-in-the-middle-attack

Jun 5 at 12:16 Dario Blair 31

votes

answer

187

views

Asymmetric CSPRNG where the public key only works backward

random-number-generator

Jun 5 at 7:40 DannyNiu 2,766

votes

answer

151

views

DSA: why using mod p mod q and not just mod p

signature dsa

Jun 3 at 21:26 Squeamish Ossifrage 39.8k

votes

answers

807

views

Are there MD5 collisions for inputs of different length?

hash collision-resistance md5

Jun 1 at 14:11 SEJPM♦ 36.5k

votes

answer

278

views

Shuffling alphabet cipher [closed]

classical-cipher

May 31 at 15:29 S. L. 339

votes

answers

views

Usage of the nth-root function in cryptography

function-evaluation

May 25 at 12:58 deamentiaemundi 173

votes

answers

329

views

How to prevent accidental nonce reuse with AEAD cipher

nonce

May 24 at 13:39 Squeamish Ossifrage 39.8k

votes

answers

views

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

history rabin-cryptosystem

May 22 at 2:38 forest 10.3k

vote

answer

179

views

How should the key schedule be designed for this general block cipher?

cryptanalysis block-cipher

May 20 at 0:48 forest 10.3k

vote

answer

203

views

Help understanding how to decrypt cipher

block-cipher padding xor padding-oracle decryption-oracle

May 16 at 6:21 MarianD 205

Stack Exchange Network

current community

your communities

more stack exchange communities

Next badge

173 Favorites

Perfect shuffle possible with limited raw entropy?

Encrypt data. Create 5 keys. Just 3 keys are needed for decryption

Why is this voting system not secure?

Why should I use Authenticated Encryption instead of just encryption?

Decryption of RSA with e that has no inverse

Alter plaintext through IV in block cipher AES in CBC mode

Optimal memory-hard KDF parameters when faced with small, slow memory

What's wrong with this digital signature scheme?

Is there any existing cipher capable of scaling from a 1 bit key up to a one-time-pad?

Is there another resource for Carter-Wegman-style message authentication?

Is there a way to make a non-specific algorithm to decypher substitutions with “anti-frequency analysis” measures?

What is an accurate definition for a 'Monoalphabetic substitution cipher' and why does it provide a poor level of security

Which risks are associated with deriving multiple keys from the same DH secret Z?

Nonce-misuse-resistance scheme applied after the fact to AES-GCM for defense in depth?

AES-XTS vs AES-CTR for Write Once Storage

collision resistance of a composed hash function

Are there conventions for signing JSON as a tree, to allow proofs of signed subtrees?

Does anyone sell a proprietary symmetric encryption alogirthm?

Setting MAC field to all-zero to indicate unencrypted data

Hashing a hash for authentication

Meet-in-the-middle attack (on custom encryption scheme) [duplicate]

Asymmetric CSPRNG where the public key only works backward

DSA: why using mod p mod q and not just mod p

Are there MD5 collisions for inputs of different length?

Shuffling alphabet cipher [closed]

Usage of the nth-root function in cryptography

How to prevent accidental nonce reuse with AEAD cipher

Why did Rabin use $x(x + b)$ instead of just $x^2$ in the original paper?

How should the key schedule be designed for this general block cipher?

Help understanding how to decrypt cipher