User Aravind A

18 votes

2 answers

4k views

Where did ChaCha20 and Salsa20 stream ciphers get their names from?

asked Mar 9, 2020 at 0:09

10 votes

2 answers

1k views

What is a "constant time" work around when dealing with the point at infinity for prime curves?

asked Dec 5, 2020 at 4:24

9 votes

3 answers

6k views

Is the ChaCha20 block function reversible using known plaintext?

asked Feb 15, 2020 at 9:17

8 votes

1 answer

3k views

How does Montgomery reduction work?

asked Oct 3, 2020 at 0:57

6 votes

1 answer

217 views

Does any $x < p$ satisfy the curve equation of X25519?

asked Feb 9, 2020 at 8:22

4 votes

1 answer

602 views

How to secure Elliptic Curve ElGamal encryption against known plaintext attacks?

asked Feb 9, 2020 at 11:39

3 votes

0 answers

417 views

Why are integers considered "little endian" in ChaCha20 function?

asked Mar 22, 2020 at 17:32

3 votes

1 answer

1k views

Which is the best algorithm for large scale file encryption other than AES?

asked Mar 26, 2020 at 14:07

3 votes

1 answer

5k views

Is XChacha20 - Poly1305 Quantum resistant?

asked Mar 29, 2020 at 5:06

2 votes

0 answers

241 views

What are the prerequisites for understanding Lattice based Cryptography, LWE or RLWE based on SVP?

asked Aug 29, 2020 at 12:13

2 votes

0 answers

387 views

Is "double-and-add-always" a good mitigation against side channel attacks?

asked Sep 28, 2020 at 12:32

2 votes

1 answer

431 views

Why are polynomials chosen with coefficients in $GF(2^{8})$ in Section 4.3 of NIST FIPS 197 for implementing AES?

asked Apr 26, 2020 at 6:00

2 votes

0 answers

159 views

How vulnerable are SIMD operations to side channel attacks?

asked Jul 12, 2020 at 15:10

1 vote

0 answers

101 views

Which are the most Promising Post-quantum Public Crypto Primitives in the Face of a Quantum Apocalypse?

asked Jul 12, 2020 at 19:35

1 vote

1 answer

489 views

What basic knowledge is required to understand SIKE?

asked Jul 23, 2020 at 21:21

1 vote

1 answer

117 views

Block ciphers as secure as AES but immune against cache timing attacks?

asked May 1, 2020 at 0:06

1 vote

1 answer

243 views

Does clustering the AES Sbox look up table to 32 bit entry per index, help reduce vulnerability to cache timing attacks?

asked May 16, 2020 at 10:35

1 vote

1 answer

401 views

Hash based stream cipher where the input is a constant, key, nonce and counter

asked May 21, 2020 at 20:03

1 vote

2 answers

1k views

What is the proper way to implement AES CTR with 128 bit nonce and 64 bit counter?

asked Aug 28, 2020 at 13:53

1 vote

2 answers

4k views

How weak is using AES with a 128 bit key but 64 bits of the secret key are public constants?

asked Oct 7, 2023 at 17:43

1 vote

2 answers

3k views

How to pad a 448 bit message for SHA256?

asked Apr 6, 2020 at 18:44

1 vote

1 answer

3k views

How to generate a nonce for ChaCha20 Poly1305?

asked Mar 4, 2020 at 1:53

1 vote

1 answer

122 views

How to make this cipher strong?

asked Jan 29, 2020 at 8:57

1 vote

3 answers

1k views

How strong is XOR encryption of 256 bit plain text with 256 bit key?

asked Nov 30, 2019 at 17:56

0 votes

1 answer

829 views

How to make an AES implementation using lookup tables immune to cache timing attacks?

asked Jan 12, 2020 at 14:10

0 votes

1 answer

140 views

Does hashing a hash of a password over and over again increase its security?

asked Jan 13, 2020 at 10:30

0 votes

1 answer

629 views

Is there any security issue if an attacker recovers the key stream generated by a stream cipher?

asked Jan 29, 2020 at 10:33

0 votes

0 answers

23 views

Does reusing the same $R$ in Elliptic Curve ElGamal breach its security? [duplicate]

asked Feb 11, 2020 at 8:49

0 votes

1 answer

187 views

Is this the right way to implement ElGamal scheme over Elliptic Curves over prime field? [duplicate]

asked Nov 22, 2019 at 12:29

0 votes

1 answer

2k views

Why AES 256 GCM is more preferred by email service providers / banks over the fast and efficient ChaCha20 - Poly1305?

asked Feb 17, 2020 at 20:10

Stack Exchange Network

36 Questions

Where did ChaCha20 and Salsa20 stream ciphers get their names from?

What is a "constant time" work around when dealing with the point at infinity for prime curves?

Is the ChaCha20 block function reversible using known plaintext?

How does Montgomery reduction work?

Does any $x < p$ satisfy the curve equation of X25519?

How to secure Elliptic Curve ElGamal encryption against known plaintext attacks?

Why are integers considered "little endian" in ChaCha20 function?

Which is the best algorithm for large scale file encryption other than AES?

Is XChacha20 - Poly1305 Quantum resistant?

What are the prerequisites for understanding Lattice based Cryptography, LWE or RLWE based on SVP?

Is "double-and-add-always" a good mitigation against side channel attacks?

Why are polynomials chosen with coefficients in $GF(2^{8})$ in Section 4.3 of NIST FIPS 197 for implementing AES?

How vulnerable are SIMD operations to side channel attacks?

Which are the most Promising Post-quantum Public Crypto Primitives in the Face of a Quantum Apocalypse?

What basic knowledge is required to understand SIKE?

Block ciphers as secure as AES but immune against cache timing attacks?

Does clustering the AES Sbox look up table to 32 bit entry per index, help reduce vulnerability to cache timing attacks?

Hash based stream cipher where the input is a constant, key, nonce and counter

What is the proper way to implement AES CTR with 128 bit nonce and 64 bit counter?

How weak is using AES with a 128 bit key but 64 bits of the secret key are public constants?

How to pad a 448 bit message for SHA256?

How to generate a nonce for ChaCha20 Poly1305?

How to make this cipher strong?

How strong is XOR encryption of 256 bit plain text with 256 bit key?

How to make an AES implementation using lookup tables immune to cache timing attacks?

Does hashing a hash of a password over and over again increase its security?

Is there any security issue if an attacker recovers the key stream generated by a stream cipher?

Does reusing the same $R$ in Elliptic Curve ElGamal breach its security? [duplicate]

Is this the right way to implement ElGamal scheme over Elliptic Curves over prime field? [duplicate]

Why AES 256 GCM is more preferred by email service providers / banks over the fast and efficient ChaCha20 - Poly1305?