Hottest Questions Today - Cryptography Stack Exchange

1 vote

0 answers

17 views

What are the design-level constraints in TLS 1.3 for post-quantum adoption?

e-sushi

18.1k

asked 9 hours ago

1 vote

0 answers

13 views

Performing scalar multiplication on secp256k1 using only the x-coordinate of a point

Mr.

11

modified 12 hours ago

1 vote

1 answer

22 views

Is it possible to perform a usefull weil descent against an elliptic curve defined over $F_q^2$?

Daniel S

28.7k

modified 16 hours ago

1 vote

1 answer

173 views

"Key agreement" versus "key exchange" versus "key establishment"

Maarten Bodewes♦

96k

modified 21 hours ago

9 votes

2 answers

3k views

Why do encryption algorithms not consider the length of the message to be encrypted as sensitive information?

hobbs

610

modified 2 days ago

0 votes

0 answers

18 views

Difference between non-collusion and single-party corruption assumptions

Maarten Bodewes♦

96k

modified 17 hours ago

4 votes

2 answers

148 views

Can wave-phase recurrence reveal structure in RNGs that pass all entropy tests?

kodlu

24.6k

answered yesterday

2 votes

1 answer

63 views

A Question on Weil, Tate and other Pairings of Elliptic Curves

Hey

87

modified yesterday

0 votes

1 answer

35 views

Biometrics + password scheme

Maarten Bodewes♦

96k

modified yesterday

4 votes

1 answer

73 views

Confused about converting Ed25519 public key to X25519 public key

Jack Lund

81

answered 2 days ago

0 votes

2 answers

57 views

Should we cut the key to length KMAC128 168 KMAC256 136

aiootp

1,142

modified 14 hours ago

4 votes

1 answer

268 views

Practical implications of using HKDF as key combiner

Maarten Bodewes♦

96k

modified May 6 at 13:17

1 vote

1 answer

67 views

Lwe with large error range

Daniel S

28.7k

answered May 7 at 9:13

3 votes

1 answer

69 views

Banburismus and Bonus Scoring System

Daniel S

28.7k

modified 2 days ago

0 votes

0 answers

29 views

How to blind a Pedersen signature?

Maarten Bodewes♦

96k

modified 2 days ago

1 vote

1 answer

66 views

(How to Prevent) Provably Revealing Information about HMAC pre-image

poncho

153k

modified May 6 at 21:24

2 votes

3 answers

387 views

Finding the public key of the domain owner in domain name certificates

user1686

199

modified May 4 at 19:39

1 vote

0 answers

36 views

Is SPHINCS+ viable for authenticating websites?

Melab

3,935

asked May 6 at 13:58

3 votes

2 answers

441 views

How can I make a Streaming Cipher Self-Synchronizing - and why?

fgrieu♦

148k

modified May 3 at 7:12

0 votes

0 answers

46 views

DSA probability Evaluation

madhurkant

743

modified May 5 at 22:28

2 votes

0 answers

42 views

Recoverable ECDSA signature validation

PropzSaladaz

21

modified May 5 at 19:01

0 votes

1 answer

23 views

DTLS 1.3 Record sequence number encryption

poncho

153k

answered May 5 at 18:41

1 vote

1 answer

46 views

Hardware Reverse Engineering FPGA LUTs for AES Analysis

b degnan

5,070

answered May 4 at 16:21

5 votes

1 answer

560 views

Why was the value of modulus (q) chosen small in KYBER and large in DILITHIUM?

DannyNiu

10.1k

modified Apr 30 at 4:52

7 votes

1 answer

1k views

Was the "higher cipher" that Robert Graves describes in his novel "I, Claudius" a real historical cipher, or was it his invention?

Maarten Bodewes♦

96k

modified Apr 27 at 14:50

-1 votes

1 answer

113 views

Found collision in fnv132 hash

fgrieu♦

148k

answered Apr 30 at 12:00

-1 votes

0 answers

30 views

I have managed to solve most of the parts but need to make sure if part d is done right [closed]

Maarten Bodewes♦

96k

modified May 3 at 15:15

1 vote

0 answers

41 views

Is there a blind signature scheme that ensures the (user, message) pair can be only signed once

SixZiv

11

asked May 2 at 18:54

0 votes

1 answer

96 views

Would re-ordering encoded text be more secure?

Maarten Bodewes♦

96k

modified Apr 30 at 9:33

6 votes

1 answer

59 views

Impossible optimization in IKE Intermediate RFC?

poncho

153k

modified May 5 at 12:20

2 votes

1 answer

94 views

+50

Proving knowledge of message encrypted using Elgamal which is also committed in another "commitment"

aiootp

1,142

modified 12 hours ago

3 votes

0 answers

39 views

NTT vs. Karatsuba for polynomial ring multiplication

cnks

41

asked May 1 at 20:40

6 votes

1 answer

106 views

How has WhatsApp addressed group member authenticity and forged acknowledgements since the 2018 "More is Less" paper?

Martin R. Albrecht

306

answered yesterday

2 votes

1 answer

68 views

About obfuscating re-encryption: the first construction is not a obfuscator

Mahesh S R

1,741

answered Apr 30 at 8:35

5 votes

1 answer

567 views

Where not to use the ROM

Mikero

14.8k

answered Apr 24 at 6:49

1 vote

1 answer

115 views

Lattice attack against single signature : how to modify the b1 and c1 constants in order to get the script working against smaller leaks?

fgrieu♦

148k

modified Apr 30 at 11:44

0 votes

0 answers

63 views

Are qr codes secure from brute force?

diviserbyzero

9

asked Apr 30 at 4:38

1 vote

1 answer

72 views

Proving that one discrete logarithm is the square or inverse of another one

Zachary Barbanell

121

modified Apr 28 at 18:29

1 vote

1 answer

106 views

For AES-GCM, why do protocols not use the nonce to prevent replay attacks?

poncho

153k

modified Apr 28 at 15:42

2 votes

0 answers

50 views

Change KYBER KEM parameters

R_Jalaei

455

asked Apr 29 at 7:05

1 vote

1 answer

53 views

Is it obvious that if Enigma Ring settings are displayed in the Indicator Windows, the Enigma will encode identically up until a turnover?

Daniel S

28.7k

modified Apr 28 at 15:54

0 votes

0 answers

55 views

Master-slave encryption/decryption keys

Melab

3,935

asked Apr 28 at 22:32

1 vote

1 answer

138 views

How to complete security definition

Mahesh S R

1,741

answered Apr 25 at 9:59

1 vote

1 answer

162 views

Gathering entropy at different times using a cycle counter

fgrieu♦

148k

modified Apr 27 at 6:56

2 votes

1 answer

92 views

Amicable Pairs and Koblitz curve

madhurkant

743

modified Apr 26 at 1:07

3 votes

3 answers

954 views

Does the padding have to be invertible for MAC security?

Marc Ilunga

3,797

answered Apr 16 at 13:19

1 vote

1 answer

53 views

Cost of TLS (1.3) Handshake using RSA compared to cost of using ECC?

n-l-i

1,054

answered Apr 27 at 16:57

3 votes

1 answer

349 views

Is it possible to find an elliptic curve of specific order such that the order is greater than the prime number used to construct it?

kodlu

24.6k

modified Apr 23 at 0:28

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.