# All Questions

21 views

### Assuming that we had a way of finding primes, could RSA be used without computers?

I once asked a question "Would RSA make sense if we used no computers?". The answer was negative, because finding primes that would make secure keys would prove too hard. Assuming that we had found ...
11 views

### Rabin/RSA four possible messages?

Given this encryption method: $$f_{N,e} : Z^{*}_{N} \to QR(N)^{*};\quad f_{N,e}(x) = x ^{2e} \bmod N$$ I need to show that, for any $x_{0} \in Z^{*}_{N}$, there are four elements $x \in Z^{*}_{N}$ ...
16 views

### Analysis of WSNs using ECC for negotiation of symmetric pairwise keys

I'm working on a project in which I have to analyze(find security, time, computation and power requirements) a WSN which using Elliptic Curve Cryptography(ECC) to negotiate a symmetric pairwise key ...
54 views

### Can you help me with this DES variant analysis?

I'm struggling with some DES variant that I got as an exercise (exercise taken from Katz-Lindell Ex5.14). The variant is as follows: The left half of the master key is used to derive all the ...
41 views

### What is a good analogy (which a layperson would understand) for the process of Bitcoin mining?

I will be explaining Bitcoin to a non-technical group and I am hoping somebody can provide me with a very basic visual analogy of the crypto-currency mining process. My half-baked idea, was to ...
23 views

### Is it feasible to implement my encoding module in multi-threaded mode? [on hold]

I am working on data integrity protection scheme, as described at “FMSR-DIP: Enabling Data Integrity Protection in Regenerating-Coding-Based Cloud Storage ”, in which my DIP encoding module works on a ...
34 views

### Find the key to a Vigenère cipher, given known ciphertext and plaintext

I have the ciphertext and the plaintext. Is it possible to know the key? If not, what do I need to find it?
87 views

### Why is it that researchers prefer finding secure software solutions over secure hardware solutions?

My understanding is crypto researchers tend to prefer solving a problem in software without the need for secure hardware. Why is this? What is the big problem with using secure hardware if the ...
41 views

### PRP representation size

I'm now studying the block cipher - SPN construction and realized that it uses several small PRPs instead a big one for saving memory (or that is one of the reasons). Why does the PRP with ...
49 views

### What is a Message Transmission Scheme?

I've been given as an exercise to show an encryption scheme that is CCA-secure but is not a secure message transmission scheme. What is a message transmission scheme, and how does it differ from a ...
35 views

### why RSA uses Semiprime numbers? [duplicate]

Why does RSA use semiprime numbers? Why not just use any big number ?? What is the advantage of the two original numbers being prime? Because factoring any big number will be difficult
44 views

### How well does breaking multiple DH key exchanges over the same group scale?

Suppose you are running a server with the Diffie-Hellman parameters (so the group G and generator g) generated once. There are ...
45 views

### Asymmetric Cryptography Confusion - 'Sign' a file to guarantee its source

What I want to do is use asymmetric crypto to guarantee that a file comes from a source. I have software that runs on lots of wireless devices, and each of those has a license file with an encrypted ...
107 views

### Why should I use Authenticated Encryption instead of just encryption?

There are various different modes of operation for block cipher use, some of which provide "encryption" and some of which provide authenticated encryption. Why should I use an authenticated ...
57 views

### How can I tell how many bits of security a secure hash function has?

How can I tell how many bits of security a secure hash function has? For example, how would I calculate or tell how many bits of security a secure hash function with 160 bits output would have? ...
27 views

### Will ecryptfs prompt for mount passphrase if configured to mount at fstab [on hold]

I am aware that encryption at boot is often accomplished with luks dm-crypt, however it would appear that dm-crypt can only handle fixed length containers or partitions. It would be convenient to ...
13 views

### Is it possible to change an ecryptfs mount/file passphrase? [on hold]

Is it possible change the mount passphrase of a ecryptfs mount? (not the wrapping passphrase of a ~/Private) I have a recollection of reading something about ...
14 views

### Where is the declaration of execution of ecryptfs for on user login automount? [on hold]

For a ~/Private mount generated by the ecryptfs helper utility, where is the declaration to (check for the automount file) execute ecryptfs on user login? Same ...
37 views

### Could anyone tell me some applications of attribute-based encryption? [on hold]

I want to write a review of attribute-based encryption. Please give me some applications of ABE. Thank you!
55 views

### Is it possible to split a large AES encrypted string and decrypt the parts one by one?

Due to some platform restrictions our decryption algorithm can only handle up to 1 million bytes. The string we receive is larger, having been generated by AES in cipher block chaining (CBC) mode, ...
48 views
+50

### Is there a Pairing-free ID-based AKE protocol that is secure under the eCK model?

As far as I know, most of ID-based authenticated key exchange (AKE) protocols are CK-secure, and there are few of them which are eCK-secure. All of the eCK-secure ID-based AKE protocols use the ...
106 views

### Slow one-way pseudorandom permutation?

I'm looking for a slow keyed trapdoor one-way pseudorandom permutation; or in other words a block cipher $E_K: P\in\{0,1\}^b\mapsto C\in\{0,1\}^b$ with moderate block size $b\approx 64$ bits, wide key ...
47 views

### Increasing the diffusion of the AES-CBC encryption algorithm in pycrypto for python

When encryption is done using the AES-CBC algorithm, the encryption can be thought of as chaining the cipher texts with the previous ones and an IV. However, if its on CBC mode, we give our cipher ...
27 views

### What is “serial concatenation”?

I have a third-party point-of-sale API (Speedflow Pay-N-Get) that I am trying to communicate with over HTTP, but I have a problem with it. In a nutshell, a request is encrypted using RSA, and the ...
36 views

### How do we arrive to the equation for solving D in RSA?

We have been shown that DE is congruent to 1 mod phi(n). How do we arrive to the real equation for figuring out d that is d = e^-1 mod phi(n). I want to know the entire process. I am just curious, ...
34 views

### A replay attack question

Which of the following protocols is susceptible to replay attack :- 1) A -----> B username, password 2) A -----> B username, h(timestamp,password) 3) A -----> B username timestamp, ...
47 views

### Is there any analysis of freebsd's “geli” encrypted geometry provider?

I've done a few obvious searches on google and google scholar and not turned up any security analysis of FreeBSD's geli. Is there some out there, or has it gone unanalyzed since its introduction ...
109 views

### Why are these techniques not feasible to crack RSA?

For $d = e^{-1} \mod \phi(n)$ $$d\cdot e \operatorname{mod} \phi(n)=1$$ $$d = (e^{-1} \operatorname{mod} \phi(n))$$ With having $e$ and $n$, we can calculate the value of $d$ , the private key for ...
92 views

### How do I calculate the private key in RSA?

Given $n=pq$ for $p,q$ known, I can calculate $\phi(n)$. $e$ is selected such that $\gcd (e,\phi(n)) = 1$. Using this, how do I calculate the RSA private key? Example: I have $n = 35$, with ...
47 views

### Need 32-bit mixing function that has perfect avalanche between octets

for my hobby tinkering project, I need a mixing function that takes 32-bit input and has 32-bit output (and will, most likely, run in a 32-bit C environment) and the following property (independent of ...
24 views

### Correlated or biased coin protocols?

There are a number of papers in the literature describing secure/fair coin flipping protocols. Unfortunately in my case, I am looking for coins that are epsilon-biased or epsilon-correlated. I am ...
51 views

### counting points not on elliptic curve

Given an curve with equation $y^2=x^3+ax+b$, I want to find the number of pairs $(a,b)\in \mathbb{F}_p \times \mathbb{F_p}$ NOT on the curve. How do I do it? I have an intuition that it is $p$, but ...
53 views

### Does it make sense to stretch non-keys?

I was thinking about stretching salt. Key-stretching is good against brute force guessing and assumes your system isn't compromised. Salting a one-way makes it so you have to compute * n for each ...
57 views

### If H(m) = 0 for some m, how can a DSA signature be forged?

If we know for some message $m$ that $H(m) = 0$, how can we forge a DSA signature with only the public key? I got that $g^s*r = (g^x)^r$ where $x$ is the private key, but that's one equation with 2 ...
78 views

### Is an elliptic curve over $\mathbb{F}_p$ order preserving for the points $(x,y) \in \mathbb{Z}_p$?

Let $E\colon y^2=x^3+ax+b$ be an elliptic curve, and consider its realisation over the finite field of prime order $p$: $E(\mathbb{F}_{p})$. Then if $0<a,b$ is the following true? \forall ...
52 views

### Enhance CSPRNG output [duplicate]

If I XOR the output from 2 CSPRNG will the result be better (more random) than the output from either one? Assume one of the PRNG is biased.
66 views

### counting points on elliptic curve

Given an elliptic curve with equation $y^2=x^3+ax+b$, and i want to find the number of points $(a,b)\in E(\mathbb{F}_p)$ where the polynomial has repeated roots, how do i do it? I have an intuition it ...
48 views

### Regex searchable word list for space-less monoalphabetic substitution

I am working on teaching myself basic cryptography, in the process I created a simple substitution cipher based on a single alphabet, and a statically defined offset (no key for now). Now that ...
146 views

### Can insecure algorithms be combined to form a secure algorithm?

This is hypothetical as I can't think of any reason to do this, but out of curiosity.. Could I, for example, take the MD5 digest of a message and concatenate it with the SHA-1 digest (not quite ...
85 views

### Is a simple stream cipher “partially homomorphic” if no integrity check is applied?

My understanding is that, simply put, a stream cipher is just a CSPRNG such that $R(i,k)$ will produce a deterministic but statistically random sequence, where $i$ is an IV, and $k$ is the session ...
44 views

### unknown Transposition ciphertext [on hold]

What cryptanalysis can be made to find the transposition code for a cipher: it's not railfence, slidefair, classical rectangular by rows or columns, or double rectangular, or Ubchi. For a ...
39 views

### The real-life meaning of proving over a group that doesn't support the oracle?

If I proved a scheme's security under GDH assumption, in real-life, if this DDH oracle does exist, then it's good, but what about other side ? In real-life, if this DDH oracle doesn't exist, then ...
25 views

### Why doesn't this authentication protocol work? [duplicate]

I am a student taking a cryptography course so forgive me if this comes off as a silly question. This is an assignment question: Alice ------R--------> Bob Alice <-----[R]B------ Bob Alice ...
81 views

### Why doesn't this dummy mutual authentication protocol provide mutual authentication?

I am a student taking a cryptography course so forgive me if this comes off as a silly question. This is an assignment question: ...
112 views

### Why can an RSA signature be authenticated ONLY with the signer's public key?

I'm an undergraduate Math student currently taking a cryptology course. I have a question about the RSA signature authentication mechanism. An RSA signature can be authenticated with the public key ...
132 views

### Keyed digest function with odds of collision below the birthday bound?

I wonder if it is possible to devise a function $F(K,S,R_S)\mapsto D$ where: $K$ is some key (I have freedom on $K$, it could even be generated by a trusted party); $S$ is in $\{0,1\}^s$, say ...
102 views

### RSA performance

I was wondering what is the performance bottleneck in RSA algorithm? Is it the size of message, calculating the modular inverse, exponentiation? Say I have a fixed value of n to encrypt and decrypt ...
59 views

### Is the composition of collision resistant hash with non collision resistant hash a collision resistant hash?

Suppose $h_1$ is collision resistant, and $h_2$ isn't. Will $h(x)=h_2(h_1(x))$ always be collision resistant? [Edited:] the output of h2 must be uniformly distributed
I have taken elliptic curve $E\colon y^2=x^3-4x+20$, defined over $\mathbb{F}_{29}$. The number of points on the curve, $\left|E(\mathbb{F}_{29})\right|=37$. I took base point $P=(1,5)$, and got ...