User Dingo13

25 votes

4 answers

20k views

The exact difference between a permutation and a substitution

encryption terminology

asked May 30, 2013 at 11:56

20 votes

1 answer

11k views

Does collision resistance imply (or not) second-preimage resistance?

asked Jun 28, 2014 at 9:32

13 votes

1 answer

5k views

Proofs by reduction and times of adversaries

provable-security security-definition

asked Feb 11, 2014 at 13:08

12 votes

2 answers

3k views

Is a small size block cipher usable?

block-cipher blocksize

asked Jun 19, 2013 at 14:07

10 votes

1 answer

2k views

Difference between computational and statistical indistinguishabilities

provable-security

asked Nov 19, 2013 at 14:41

9 votes

4 answers

7k views

Security proofs for CBC mode

cbc provable-security reference-request

asked Nov 6, 2013 at 19:34

8 votes

8 answers

2k views

A block cipher with independent keys for each round

block-cipher algorithm-design provable-security

asked Jul 5, 2013 at 16:23

7 votes

1 answer

2k views

Proofs of security methodologies

provable-security security-definition

asked Jun 7, 2013 at 13:04

7 votes

2 answers

2k views

What is the definition of "security beyond the birthday paradox"?

provable-security mac terminology

asked Oct 12, 2013 at 14:58

7 votes

1 answer

8k views

How do RSA and ECDSA differ in signing performance?

rsa dsa performance

asked May 5, 2014 at 22:13

7 votes

2 answers

1k views

OCB and GCM security

provable-security modes-of-operation gcm ocb

asked Aug 26, 2014 at 5:38

7 votes

5 answers

6k views

AES decryption vs encryption speed

aes ctr performance

asked Sep 2, 2015 at 9:13

7 votes

1 answer

1k views

2-party private set intersection

private-set-intersection

asked Sep 19, 2017 at 9:26

6 votes

1 answer

623 views

Is the RSA signature attack from Desmedt and Odlyzko practical?

rsa signature attack

asked Sep 21, 2017 at 8:18

5 votes

1 answer

299 views

McEliece and cryptanalysis

cryptanalysis post-quantum-cryptography mceliece

asked Jul 9, 2014 at 9:07

5 votes

3 answers

4k views

Cryptography and FPGA

implementation performance

asked Aug 19, 2015 at 7:32

5 votes

1 answer

1k views

Functions that are only second-preimage resistant?

2nd-preimage-resistance

asked Jun 14, 2014 at 8:09

5 votes

1 answer

2k views

Unforgeability and type of adversary

signature provable-security forgery

asked Dec 18, 2013 at 22:04

5 votes

1 answer

2k views

Signature with appendix

terminology security-definition

asked Jun 24, 2013 at 9:13

4 votes

2 answers

586 views

Hash function based on block cipher (and proof of security in the PRP model)

hash provable-security random-oracle-model

asked Sep 10, 2013 at 13:54

4 votes

1 answer

382 views

Questions about the ideal cipher model

provable-security

asked Jun 8, 2013 at 13:11

4 votes

2 answers

1k views

Why does PSS produce an EM message that's almost as long as the modulus?

rsa-pss

asked Sep 13, 2017 at 20:17

3 votes

2 answers

2k views

About salted passwords

passwords salt

asked Jul 31, 2017 at 13:46

3 votes

2 answers

655 views

Does CTR mode yield a PRF?

pseudo-random-function ctr

asked Aug 26, 2015 at 12:17

3 votes

2 answers

450 views

Signature and hash function properties

hash signature preimage-resistance

asked Jul 28, 2015 at 9:51

3 votes

2 answers

855 views

security in the standard model → random oracle model?

provable-security

asked Apr 11, 2014 at 21:39

3 votes

2 answers

269 views

Have these compositions of block ciphers the same security?

block-cipher des 3des multiple-encryption

asked Jun 10, 2013 at 10:56

3 votes

3 answers

529 views

Construct a random permutation from a random function?

randomness pseudo-random-function permutation

asked Jul 3, 2013 at 7:28

3 votes

2 answers

2k views

Secure use-cases of block cipher with 64-bit block size

block-cipher blocksize

asked Jun 4, 2013 at 8:43

3 votes

2 answers

417 views

Composition of block ciphers and 3DES

aes block-cipher des 3des multiple-encryption

asked Jun 6, 2013 at 12:57

Stack Exchange Network

current community

your communities

more stack exchange communities

66 Questions

The exact difference between a permutation and a substitution

Does collision resistance imply (or not) second-preimage resistance?

Proofs by reduction and times of adversaries

Is a small size block cipher usable?

Difference between computational and statistical indistinguishabilities

Security proofs for CBC mode

A block cipher with independent keys for each round

Proofs of security methodologies

What is the definition of "security beyond the birthday paradox"?

How do RSA and ECDSA differ in signing performance?

OCB and GCM security

AES decryption vs encryption speed

2-party private set intersection

Is the RSA signature attack from Desmedt and Odlyzko practical?

McEliece and cryptanalysis

Cryptography and FPGA

Functions that are only second-preimage resistant?

Unforgeability and type of adversary

Signature with appendix

Hash function based on block cipher (and proof of security in the PRP model)

Questions about the ideal cipher model

Why does PSS produce an EM message that's almost as long as the modulus?

About salted passwords

Does CTR mode yield a PRF?

Signature and hash function properties

security in the standard model → random oracle model?

Have these compositions of block ciphers the same security?

Construct a random permutation from a random function?

Secure use-cases of block cipher with 64-bit block size

Composition of block ciphers and 3DES