User rmalayter

21 votes

Accepted

What is the key size currently used by RSA and Diffie-Hellman for secure communication over Internet?

answered May 11, 2017 at 11:15

18 votes

What is the practical impact of using System.Random which is not cryptographically random?

answered Aug 30, 2019 at 1:40

12 votes

Password Hashing Security Using Scrypt & Argon2

answered Jul 7, 2019 at 8:55

10 votes

How to encrypt a file for random access

answered Aug 20, 2014 at 5:52

9 votes

Accepted

Is PBKDF2/RFC 2898 broken because SHA1 is broken?

answered May 18, 2017 at 15:32

7 votes

Accepted

What are the uses of arbitrary length output hashes (other than OAEP)?

answered Mar 1, 2019 at 15:38

6 votes

Accepted

GUIDs as a salt

answered Oct 16, 2018 at 16:46

6 votes

Accepted

What's the consequence of having a short IV? Is one mode better in that case?

answered Aug 22, 2014 at 21:49

6 votes

Accepted

Can one extend the nonce of ChaCha/Salsa20 by XORing the extra bits with the key?

answered Mar 27, 2016 at 2:01

6 votes

Ensuring integrity and confidentiality together with symmetric encryption

answered Aug 24, 2015 at 21:16

5 votes

Usage and limitations of sponge functions for PRNG

answered Jul 9, 2018 at 14:12

5 votes

Security difference between $\mathrm{Keccak}(k\mathbin\|x)$ and $\mathrm{Keccak}(x\mathbin\|k)$

answered Jul 31, 2018 at 2:42

5 votes

Deriving secret keys vs generating and encrypting them

answered 2 days ago

4 votes

Accepted

Some Questions about salts

answered Jul 26, 2017 at 12:09

3 votes

Reasonable Password Entropy given a certain Set of argon2 Parameters

answered Oct 5, 2018 at 13:41

3 votes

Accepted

Key derivation: Does it make sense to use KDF and PRF consecutively?

answered Sep 5, 2018 at 14:20

3 votes

Accepted

Are there any authenticated stream ciphers that use the same PRF for MAC and cipher?

answered Apr 21, 2017 at 21:58

3 votes

Accepted

How to improve entropy on a router running Linux kernel 2.6.x without TRNG or RTC?

answered May 6, 2017 at 11:24

3 votes

Accepted

What is the most light-weight symmetric cipher thats still usefull?

answered Mar 18, 2015 at 2:05

2 votes

Are there any high level memory-hard PBKDF constructions?

answered Sep 18, 2016 at 12:09

2 votes

Accepted

Database and End-to-End Encryption

answered Oct 14, 2016 at 1:22

2 votes

Accepted

Key management and derivation - Allow changing of the passphrase

answered Apr 24, 2016 at 13:55

2 votes

Self-Convergent Hashing

answered Aug 19, 2015 at 2:41

2 votes

Key Prefix KDF with Counter

answered Oct 25, 2016 at 12:04

2 votes

Is there a recommended cryptoperiod for HMAC hashing keys?

answered Jun 7, 2017 at 2:05

2 votes

Accepted

Converting a C25519 curve into a NIST-supported curve for FIPS crypto

answered Jul 24, 2017 at 22:19

2 votes

What is the use of SCRAM-SHA-256 (over SCRAM-SHA-1)?

answered Jan 1, 2019 at 4:18

2 votes

Password hashing alogirthm simple enough to implement myself?

answered Jul 14, 2019 at 14:46

1 vote

Generating 1024 bits of entropy from a seed

answered Oct 27, 2017 at 4:05

1 vote

What Are the Risks of AES-GCM [Key, Nonce, Message] where Nonce = Message

answered Mar 13, 2019 at 4:07

Stack Exchange Network

52 Answers

What is the key size currently used by RSA and Diffie-Hellman for secure communication over Internet?

What is the practical impact of using System.Random which is not cryptographically random?

Password Hashing Security Using Scrypt & Argon2

How to encrypt a file for random access

Is PBKDF2/RFC 2898 broken because SHA1 is broken?

What are the uses of arbitrary length output hashes (other than OAEP)?

GUIDs as a salt

What's the consequence of having a short IV? Is one mode better in that case?

Can one extend the nonce of ChaCha/Salsa20 by XORing the extra bits with the key?

Ensuring integrity and confidentiality together with symmetric encryption

Usage and limitations of sponge functions for PRNG

Security difference between $\mathrm{Keccak}(k\mathbin\|x)$ and $\mathrm{Keccak}(x\mathbin\|k)$

Deriving secret keys vs generating and encrypting them

Some Questions about salts

Reasonable Password Entropy given a certain Set of argon2 Parameters

Key derivation: Does it make sense to use KDF and PRF consecutively?

Are there any authenticated stream ciphers that use the same PRF for MAC and cipher?

How to improve entropy on a router running Linux kernel 2.6.x without TRNG or RTC?

What is the most light-weight symmetric cipher thats still usefull?

Are there any high level memory-hard PBKDF constructions?

Database and End-to-End Encryption

Key management and derivation - Allow changing of the passphrase

Self-Convergent Hashing

Key Prefix KDF with Counter

Is there a recommended cryptoperiod for HMAC hashing keys?

Converting a C25519 curve into a NIST-supported curve for FIPS crypto

What is the use of SCRAM-SHA-256 (over SCRAM-SHA-1)?

Password hashing alogirthm simple enough to implement myself?

Generating 1024 bits of entropy from a seed

What Are the Risks of AES-GCM [Key, Nonce, Message] where Nonce = Message