Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have been working on a project implementing LT codes with Homomorphic hashing (inspired from and

Here's what I have understood from those links.

Suppose the message to be sent and verified is a text Hello or ['H','e','l','l','o'] (ASCII values [72, 101, 108, 108, 111]).

An LT code scheme will create unlimited number of encoded chunks, one of which could be $c_1 = \mathrm{'H'} \oplus \mathrm{'e'}$.

Now transforming it to a homomorphic scheme, it becomes $c_1 = (\mathrm{'H'} + \mathrm{'e'}) \bmod q = (72 + 101) \mod 257 = 173$. 173 is sent and received by the receiver which verifies the block on-the-fly using homomorphic hashing. $$h(c_1) = (h(\mathrm{'H'}) \cdot h(\mathrm{'e'})) \bmod p$$

If it matches, it stores the encoded block otherwise it discards it. (Assuming it already stores the hashes of the individual blocks, in this case block size is assumed to be 1)

Suppose some other encoded block is $c_2 = \mathrm{'H'} = 72$. It is verified at the receiver and LT decoder decodes it to 'H' and 'e' as follows:

$c_1 = 173 = \mathrm{'H'} \oplus \mathrm{'e'}$ and $c_2 = 72 = \mathrm{'H'}$ so $c_1 - c_2 = 102 = \mathrm{'e'}$, and so on and so forth.

Is this the right way to go about it? Am I missing something in the implementation? Can we use $\oplus$ (xor) instead of addition while sending the encoded blocks?

As per above link, Nick discussed verifying file in batches of blocks. So continuing the same example, assume we'd use homomorphic hashing after receiving the first 3 bytes ('H', 'e', 'l'). After we receive first 3 bytes, we'd apply a homomorphic hash the same way as applied to string Hello as in Nick's blog. If the hash matches , we're good but if hash doesn't match (say because we had received 'I', 'e', 'l'), how do we figure out that it's the first byte that is corrupted?

share|improve this question
Dumb question: What does the symbol ⊕ mean? – LamonteCristo Apr 22 '13 at 14:15
@makerofthings7 ⊕ is one customary way of writing xor (exclusive or). – dr jimbob Apr 22 '13 at 14:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.