User Squeamish Ossifrage

84 votes

Accepted

Is Bcrypt a hashing algorithm or is my study material wrong?

answered Oct 15, 2019 at 22:51

40 votes

If password expiration is applied, should door-lock expiration be applied too?

answered Nov 21, 2019 at 18:06

39 votes

Accepted

How can I prevent side-channel attacks against authentication?

answered Oct 31, 2019 at 4:50

16 votes

Why is the HTTP protocol more susceptible to being intercepted than the BitTorrent protocol?

answered Oct 28, 2019 at 5:38

11 votes

What actions should I, as an end user, take in response to EFAIL?

answered May 15, 2018 at 3:24

8 votes

AES256 with 128 bit key

answered May 9, 2019 at 3:24

6 votes

Length of a stretched gnupg passphrase that is comparable in strength to an unstretched string of 256 random bits

answered Mar 24, 2019 at 22:09

5 votes

Does knowledge of data structure compromise AES encryption?

answered Nov 9, 2019 at 14:28

4 votes

Should I upgrade old volumes to new cryptsetup encryption mode?

answered Nov 13, 2019 at 1:22

3 votes

Is it possible to sniff HTTPS URLs?

answered Dec 27, 2017 at 4:11

2 votes

Is it secure to use MD5 to verify the integrity of small files (less than 15kb)?

answered May 30, 2018 at 13:40

2 votes

Accepted

Signing and encrypting with pairs of keys based on discrete algorithms

answered Mar 24, 2019 at 21:39

1 vote

How to encrypt and authenticate large amounts of data with NaCl

answered Mar 24, 2019 at 22:22

1 vote

Is it a mistake to use a password that has previously been used (by anyone ever)?

answered Nov 18, 2019 at 17:19

1 vote

Do integrity and authentication always come together?

answered Nov 9, 2019 at 14:35

1 vote

Attacks on RSA without knowledge of either key

answered Nov 7, 2019 at 3:28

Stack Exchange Network

16 Answers

Is Bcrypt a hashing algorithm or is my study material wrong?

If password expiration is applied, should door-lock expiration be applied too?

How can I prevent side-channel attacks against authentication?

Why is the HTTP protocol more susceptible to being intercepted than the BitTorrent protocol?

What actions should I, as an end user, take in response to EFAIL?

AES256 with 128 bit key

Length of a stretched gnupg passphrase that is comparable in strength to an unstretched string of 256 random bits

Does knowledge of data structure compromise AES encryption?

Should I upgrade old volumes to new cryptsetup encryption mode?

Is it possible to sniff HTTPS URLs?

Is it secure to use MD5 to verify the integrity of small files (less than 15kb)?

Signing and encrypting with pairs of keys based on discrete algorithms

How to encrypt and authenticate large amounts of data with NaCl

Is it a mistake to use a password that has previously been used (by anyone ever)?

Do integrity and authentication always come together?

Attacks on RSA without knowledge of either key