Skip to main content
Cryptography

Explore our questions

Ask Question
more tags
Active Hot Week Month
0 votes
0 answers
12 views

ML-KEM (Kyber) implementation not matching ACVP Gen/Vals test vectors

smith's user avatar
smith
  • 157
3 votes
1 answer
693 views

Proving equivalency of two security definitions of symmetric encryption schemes

Community's user avatar
CommunityBot
  • 1
26 votes
3 answers
21k views

How effective is quantum computing against elliptic curve cryptography?

fgrieu's user avatar
fgrieu♦
  • 150k
2 votes
1 answer
47 views

In the Fiat–Shamir transform, is it secure to derive each challenge from the previous one instead of hashing the entire transcript?

lamontap's user avatar
lamontap
  • 1,239
1 vote
1 answer
66 views

Black Box vs Non-Black Box

Geoffroy Couteau's user avatar
Geoffroy Couteau
  • 21.8k
1 vote
0 answers
26 views

Round Collapsing vs without Round Collapsing

Crypto_Research's user avatar
Crypto_Research
  • 759
6 votes
2 answers
1k views

Are most RSA integers unbalanced?

Jon Callas's user avatar
Jon Callas
  • 2,381
10 votes
1 answer
2k views

Practical uses of Manipulation Detection Code (MDC) and IGE

forest's user avatar
forest
  • 16k
0 votes
1 answer
122 views

Utility Guarantee of Small Data Base Mechanism in Differential Privacy

Community's user avatar
CommunityBot
  • 1
2 votes
2 answers
588 views

Private Information Retrieval and Writing at the same time possible?

Community's user avatar
CommunityBot
  • 1
6 votes
1 answer
295 views

Secure Secret Sharing to a Distributed Key

Community's user avatar
CommunityBot
  • 1
2 votes
3 answers
2k views

3DES security when K1=K3

forest's user avatar
forest
  • 16k
2 votes
1 answer
728 views

Decrypting a ciphertext in ElGamal's cryptosystem

Community's user avatar
CommunityBot
  • 1
1 vote
1 answer
152 views

Why $1\leq r\leq p-1$ verification is needed for (hashed) Elgamal signature?

Community's user avatar
CommunityBot
  • 1
Browse more Questions