User Dingo13

11

22

votes

4

answers

19k

views

The exact difference between a permutation and a substitution

encryption terminology

Jul 16 '19 at 20:40 Patriot 2,932

8

18

votes

1

answer

10k

views

Does collision resistance imply (or not) second-preimage resistance?

hash collision-resistance 2nd-preimage-resistance

Feb 3 '17 at 14:22 CommunityBot 1

6

13

votes

1

answer

4k

views

Proofs by reduction and times of adversaries

provable-security security-definition

Jan 24 '17 at 19:40 Chameleon 23

1

12

votes

2

answers

3k

views

Is a small size block cipher usable?

block-cipher blocksize

Jan 26 '15 at 8:35 CommunityBot 1

3

9

votes

1

answer

2k

views

Difference between computational and statistical indistinguishabilities

provable-security

Oct 19 '19 at 16:42 kelalaka 36.9k

4

9

votes

4

answers

6k

views

Security proofs for CBC mode

cbc provable-security reference-request

Oct 19 '17 at 10:00 Maarten Bodewes♦ 80.8k

2

8

votes

8

answers

2k

views

A block cipher with independent keys for each round

block-cipher algorithm-design provable-security

Dec 5 '16 at 19:16 CommunityBot 1

4

7

votes

2

answers

857

views

OCB and GCM security

provable-security modes-of-operation gcm ocb

Jan 26 '20 at 23:47 Tanver Hasan 121

2

7

votes

2

answers

2k

views

What is the definition of "security beyond the birthday paradox"?

provable-security mac terminology

Sep 17 '19 at 8:48 Patriot 2,932

5

7

votes

1

answer

1k

views

2-party private set intersection

private-set-intersection

Jul 10 '18 at 23:25 Mikero 9,210

1

7

votes

5

answers

6k

views

AES decryption vs encryption speed

aes ctr performance

Sep 2 '15 at 20:57 CommunityBot 1

7

votes

1

answer

2k

views

Proofs of security methodologies

provable-security security-definition

Jan 30 '14 at 10:59 CommunityBot 1

1

6

votes

1

answer

7k

views

How do RSA and ECDSA differ in signing performance?

rsa dsa performance

Jan 27 '19 at 23:30 Maarten Bodewes♦ 80.8k

6

votes

1

answer

530

views

Is the RSA signature attack from Desmedt and Odlyzko practical?

rsa signature attack

Sep 25 '17 at 12:37 fgrieu♦ 116k

2

5

votes

1

answer

1k

views

Unforgeability and type of adversary

signature provable-security forgery

Feb 7 at 3:05 Patriot 2,932

4

5

votes

1

answer

2k

views

Signature with appendix

terminology security-definition

Jun 12 '18 at 11:27 fgrieu♦ 116k

2

5

votes

3

answers

4k

views

Cryptography and FPGA

implementation performance

Apr 27 '16 at 16:59 CommunityBot 1

2

5

votes

1

answer

290

views

McEliece and cryptanalysis

cryptanalysis post-quantum-cryptography mceliece

Jul 12 '14 at 20:42 QuadrExAtt 328

2

5

votes

1

answer

1k

views

Functions that are only second-preimage resistant?

2nd-preimage-resistance

Jun 23 '14 at 14:35 fgrieu♦ 116k

1

4

votes

2

answers

1k

views

Why does PSS produce an EM message that's almost as long as the modulus?

rsa-pss

Sep 15 '17 at 10:25 fgrieu♦ 116k

4

votes

2

answers

565

views

Hash function based on block cipher (and proof of security in the PRP model)

hash provable-security random-oracle-model

Dec 31 '13 at 13:05 Cryptographeur 4,016

4

votes

1

answer

364

views

Questions about the ideal cipher model

provable-security

Jul 1 '13 at 21:19 minar 2,092

1

3

votes

2

answers

1k

views

Signature based on public key cryptography and forgery

signature provable-security security-definition forgery

Feb 1 at 14:49 Patriot 2,932

1

3

votes

2

answers

1k

views

About salted passwords

passwords salt

Jul 31 '17 at 16:58 Maarten Bodewes♦ 80.8k

3

votes

1

answer

307

views

The exact definition of a symmetric encryption

symmetric authenticated-encryption security-definition

Apr 19 '16 at 12:15 Cryptographeur 4,016

3

votes

2

answers

590

views

Does CTR mode yield a PRF?

pseudo-random-function ctr

Aug 30 '15 at 13:18 Yehuda Lindell 26.1k

1

3

votes

2

answers

436

views

Signature and hash function properties

hash signature preimage-resistance

Jul 28 '15 at 18:57 Yehuda Lindell 26.1k

3

votes

2

answers

404

views

Composition of block ciphers and 3DES

aes block-cipher des 3des multiple-encryption

Aug 29 '14 at 15:43 e-sushi 17.1k

2

3

votes

2

answers

832

views

security in the standard model → random oracle model?

provable-security

Apr 27 '14 at 1:31 e-sushi 17.1k

2

3

votes

2

answers

2k

views

Secure use-cases of block cipher with 64-bit block size

block-cipher blocksize

Dec 24 '13 at 18:48 CommunityBot 1

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

66 Questions

The exact difference between a permutation and a substitution

Does collision resistance imply (or not) second-preimage resistance?

Proofs by reduction and times of adversaries

Is a small size block cipher usable?

Difference between computational and statistical indistinguishabilities

Security proofs for CBC mode

A block cipher with independent keys for each round

OCB and GCM security

What is the definition of "security beyond the birthday paradox"?

2-party private set intersection

AES decryption vs encryption speed

Proofs of security methodologies

How do RSA and ECDSA differ in signing performance?

Is the RSA signature attack from Desmedt and Odlyzko practical?

Unforgeability and type of adversary

Signature with appendix

Cryptography and FPGA

McEliece and cryptanalysis

Functions that are only second-preimage resistant?

Why does PSS produce an EM message that's almost as long as the modulus?

Hash function based on block cipher (and proof of security in the PRP model)

Questions about the ideal cipher model

Signature based on public key cryptography and forgery

About salted passwords

The exact definition of a symmetric encryption

Does CTR mode yield a PRF?

Signature and hash function properties

Composition of block ciphers and 3DES

security in the standard model → random oracle model?

Secure use-cases of block cipher with 64-bit block size