Conrado
  • Member for 10 years, 4 months
  • Last seen this week
6 answers
131 votes
93k views
94 bookmarks
Should we sign-then-encrypt, or encrypt-then-sign?
2 answers
51 votes
7k views
16 bookmarks
What security authorities and standards reject $e=3$ in RSA, when, and with what rationale?
2 answers
46 votes
11k views
13 bookmarks
Why is SHA-1 considered broken?
3 answers
31 votes
9k views
14 bookmarks
Can ECDSA signatures be safely made "deterministic"?
2 answers
30 votes
14k views
7 bookmarks
Why is MixColumns omitted from the last round of AES?
3 answers
23 votes
3k views
5 bookmarks
How robust is discrete logarithm in $GF(2^n)$?
3 answers
22 votes
5k views
6 bookmarks
Known methods for constant time (table-free) AES implementation using 'standard' operations?
3 answers
22 votes
2k views
7 bookmarks
Why is Poly1305 popular given its 'sudden death' properties?
1 answers
20 votes
3k views
6 bookmarks
Mapping points between elliptic curves and the integers
1 answers
18 votes
4k views
11 bookmarks
How to communicate by email with forward secrecy and deniability?
1 answers
18 votes
5k views
6 bookmarks
How does the "biased-$k$ attack" on (EC)DSA work?
2 answers
14 votes
1k views
7 bookmarks
How to derive two keys from one password
1 answers
12 votes
2k views
4 bookmarks
What is the difference between signatures and VRF?
2 answers
11 votes
2k views
5 bookmarks
Why would Carter-Wegman-style message authentication not be broken by P = NP?
3 answers
11 votes
2k views
6 bookmarks
Is Poly1305 an information-theoretically secure MAC?
2 answers
11 votes
947 views
5 bookmarks
Streaming API to authenticated encryption
1 answers
10 votes
453 views
3 bookmarks
how does BearSSL's GCM modular reduction work?
1 answers
10 votes
2k views
3 bookmarks
For a one-time pad, which MAC method is information-theoretically secure?
1 answers
9 votes
5k views
8 bookmarks
Mapping of message onto elliptic curve and reverse it?
0 answers
8 votes
186 views
2 bookmarks
GCM with reversed poly
2 answers
7 votes
422 views
1 bookmarks
Key confirmation and other benefits of double ratchet
1 answers
6 votes
319 views
2 bookmarks
secp256k1 point density
1 answers
6 votes
1k views
1 bookmarks
Ed25519 PKCS8 private key example from IETF draft seems malformed
1 answers
6 votes
628 views
4 bookmarks
How can XTS be used to detect the presence of TrueCrypt hidden volumes?
1 answers
6 votes
456 views
2 bookmarks
Argon2 parameters concurrent access
1 answers
5 votes
3k views
3 bookmarks
Any good file format alternative to PGP for encrypting data at rest?
3 answers
5 votes
601 views
2 bookmarks
Attack against modular inversion operation using side-channels?
2 answers
5 votes
1k views
2 bookmarks
Is asynchronous perfect forward secrecy possible?
1 answers
4 votes
3k views
4 bookmarks
Why is Byte-at-a-time ECB decryption a vulnerability?
1 answers
4 votes
290 views
2 bookmarks
Order of twisted curve in pairings