user avatar
user avatar
user avatar
Dmitry Khovratovich
  • Member for 8 years, 9 months
  • Last seen more than 1 year ago
41 votes
Accepted

Why should I use Authenticated Encryption instead of just encryption?

40 votes

AES-GCM Disadvantage

20 votes
Accepted

SHA-256: (Probabilistic?) partial preimage possible?

17 votes
Accepted

Are AES-256's related-key weaknesses exploitable if it is used to build a hash?

14 votes
Accepted

Is TripleDES 168bit vulnerable to Differential Cryptanalysis?

12 votes
Accepted

Can I use HMAC-SHA1 in counter mode to make a stream cipher?

11 votes
Accepted

Does having a known plaintext prefix weaken AES256?

11 votes
Accepted

Why are the initial states of hashes functions (like SHA-1) often non-zero?

11 votes

Has threefish successfully been attacked (practically or theoretically)?

10 votes
Accepted

AES-CTR mode and the Biclique Attack

9 votes
Accepted

Formal definition of "explicit" algorithm?

9 votes
Accepted

DES — Can I recover the key when I have both ciphertext and the plaintext?

9 votes

Math to replace s-boxes - Good or bad idea?

9 votes
Accepted

How can a Vigenère cipher be broken if the message is short?

9 votes
Accepted

Problems with using AES Key as IV in CBC-Mode

9 votes

In what way is XXTEA really vulnerable?

8 votes
Accepted

Why has the sponge construction's generic collision finding attack a complexity of O(min(2^(-n/2) , 2^(-c/2)))?

8 votes
Accepted

Simple proof of work example?

7 votes
Accepted

a doubt in Rijndael's key expansion sizes

7 votes
Accepted

Applying differential cryptanalysis to ciphers with addition mod $2^{32}$

7 votes

Why to try get key out of white box crypto? How can one protect WBC itself?

7 votes

Are there any practical examples of breaking a system using linear attacks?

7 votes
Accepted

Simple proof that shows AES is not a uniform permutation on any n-bit string?

7 votes

CBC-MAC based on PRF

6 votes

Are there valid attacks on full SHA-1?

6 votes
Accepted

rotational cryptanalysis on modulo multiplication?

6 votes
Accepted

Security proofs for CBC mode

6 votes

Are there any bijective one-way functions not based on number-theoretic hardness assumptions?

6 votes

Can you explain what the AES paper means by "sharing active S-boxes"?

6 votes
Accepted

Two-dimensional S-Box