User Dmitry Khovratovich

45 votes

Accepted

Why should I use Authenticated Encryption instead of just encryption?

answered Dec 7, 2013 at 16:07

42 votes

Disadvantage AES-GCM

answered Jul 31, 2014 at 20:51

20 votes

Accepted

SHA-256: (Probabilistic?) partial preimage possible?

answered Oct 28, 2013 at 13:02

17 votes

Accepted

Are AES-256's related-key weaknesses exploitable if it is used to build a hash?

answered Apr 14, 2014 at 11:36

14 votes

Accepted

Is TripleDES 168bit vulnerable to Differential Cryptanalysis?

answered Jul 18, 2014 at 12:15

12 votes

Accepted

Can I use HMAC-SHA1 in counter mode to make a stream cipher?

answered Jan 15, 2014 at 9:00

11 votes

Accepted

Does having a known plaintext prefix weaken AES256?

answered Jul 16, 2014 at 9:49

11 votes

Accepted

Why are the initial states of hashes functions (like SHA-1) often non-zero?

answered Oct 28, 2013 at 14:17

11 votes

Accepted

AES-CTR mode and the Biclique Attack

answered Nov 6, 2013 at 19:30

11 votes

Has threefish successfully been attacked (practically or theoretically)?

answered Nov 13, 2013 at 19:48

9 votes

Accepted

DES — Can I recover the key when I have both ciphertext and the plaintext?

answered Dec 12, 2013 at 8:04

9 votes

Accepted

Formal definition of "explicit" algorithm?

answered Oct 28, 2013 at 11:12

9 votes

Math to replace s-boxes - Good or bad idea?

answered Jul 3, 2014 at 13:32

9 votes

Accepted

How can a Vigenère cipher be broken if the message is short?

answered Jul 10, 2014 at 11:59

9 votes

Accepted

Problems with using AES Key as IV in CBC-Mode

answered May 14, 2014 at 12:52

9 votes

Accepted

Why has the sponge construction's generic collision finding attack a complexity of O(min(2^(-n/2) , 2^(-c/2)))?

answered Dec 31, 2013 at 18:37

9 votes

In what way is XXTEA really vulnerable?

answered Jan 18, 2014 at 15:31

8 votes

Accepted

Simple proof of work example?

answered Aug 1, 2014 at 18:09

7 votes

Accepted

a doubt in Rijndael's key expansion sizes

answered Feb 9, 2014 at 21:38

7 votes

Why to try get key out of white box crypto? How can one protect WBC itself?

answered Oct 25, 2013 at 21:01

7 votes

Are there any practical examples of breaking a system using linear attacks?

answered Oct 29, 2013 at 9:36

7 votes

Accepted

Applying differential cryptanalysis to ciphers with addition mod $2^{32}$

answered Nov 21, 2013 at 9:37

7 votes

Accepted

Simple proof that shows AES is not a uniform permutation on any n-bit string?

answered Aug 18, 2014 at 13:09

7 votes

CBC-MAC based on PRF

answered Sep 2, 2014 at 7:05

6 votes

Are there valid attacks on full SHA-1?

answered Sep 9, 2014 at 15:18

6 votes

Accepted

rotational cryptanalysis on modulo multiplication?

answered Dec 11, 2014 at 13:10

6 votes

Accepted

Security proofs for CBC mode

answered Nov 6, 2013 at 22:39

6 votes

Are there any bijective one-way functions not based on number-theoretic hardness assumptions?

answered Nov 7, 2013 at 10:10

6 votes

Can you explain what the AES paper means by "sharing active S-boxes"?

answered Oct 26, 2013 at 10:35

6 votes

Accepted

Two-dimensional S-Box

answered Dec 22, 2013 at 20:24

Stack Exchange Network

89 Answers

Why should I use Authenticated Encryption instead of just encryption?

Disadvantage AES-GCM

SHA-256: (Probabilistic?) partial preimage possible?

Are AES-256's related-key weaknesses exploitable if it is used to build a hash?

Is TripleDES 168bit vulnerable to Differential Cryptanalysis?

Can I use HMAC-SHA1 in counter mode to make a stream cipher?

Does having a known plaintext prefix weaken AES256?

Why are the initial states of hashes functions (like SHA-1) often non-zero?

AES-CTR mode and the Biclique Attack

Has threefish successfully been attacked (practically or theoretically)?

DES — Can I recover the key when I have both ciphertext and the plaintext?

Formal definition of "explicit" algorithm?

Math to replace s-boxes - Good or bad idea?

How can a Vigenère cipher be broken if the message is short?

Problems with using AES Key as IV in CBC-Mode

Why has the sponge construction's generic collision finding attack a complexity of O(min(2^(-n/2) , 2^(-c/2)))?

In what way is XXTEA really vulnerable?

Simple proof of work example?

a doubt in Rijndael's key expansion sizes

Why to try get key out of white box crypto? How can one protect WBC itself?

Are there any practical examples of breaking a system using linear attacks?

Applying differential cryptanalysis to ciphers with addition mod $2^{32}$

Simple proof that shows AES is not a uniform permutation on any n-bit string?

CBC-MAC based on PRF

Are there valid attacks on full SHA-1?

rotational cryptanalysis on modulo multiplication?

Security proofs for CBC mode

Are there any bijective one-way functions not based on number-theoretic hardness assumptions?

Can you explain what the AES paper means by "sharing active S-boxes"?

Two-dimensional S-Box