Questions tagged [reference-request]
A reference request is a request to be provided with a source from documentation, official papers, and specs related to one or more specific algorithms or cryptographic procedures. Open ended literature recommendation requests are off topic! Also: Crypto.SE is not an optimal replacement for a search engine. The reference-request tag is not something that provides a base to replace research efforts.
414
questions
0
votes
0
answers
27
views
Looking for a authoritative reference on DER (X.509 etc) encoding standards
I'm writing a paper on parsing DER. DER the canonical sister of BER, when it comes to encoding ASN.1, with emphasis on shortest possible encoding. One of the properties that I seek to assure myself of,...
2
votes
1
answer
712
views
Clarification of the provable cryptography controversies
I read about the provable cryptography in Wikipedia. The article referred to tense controversies around 2007.
Do these controversies still exist?
What is the substitution for the provable-security? Is ...
3
votes
2
answers
896
views
Confusion and diffusion misunderstanding
I am reading the book titled "Algebra for Cryptologists". The author defined the confusion and the diffusion as follows:
Confusion: Confusion is intended to make the relationship between the ...
-1
votes
1
answer
110
views
Neural Network based on pseudorandom number
Recently, I read this paper NEURAL NETWORK BASED
CRYPTOGRAPHY. Under the section 3.1 it said:
The aim is to improve the randomness of the random numbers generated by any
algorithm using an NN. In ...
10
votes
2
answers
2k
views
Why cannot I assume that cryptography published in venues/journals handled by the same publishers as prestigious journals is serious?
I do not know if it is allowed to ask this question.
I have been told that "most of the papers on chaos-based cryptography are appearing in fee/generalist journals, whose focus is not security&...
6
votes
1
answer
312
views
Introduce a reference for cryptanalysis of WhatsApp software
I am studying on cryptanalysis of WhatsApp software. I know this is secure software but I want to present a documentary on this topic as a seminar at the university for applied mathematics students.
...
20
votes
2
answers
34k
views
Does SHA-1024 hash exist?
Does SHA-1024 cryptographic hash function exist similarly to SHA-512? If not, what's the reason for that?
Links:
SHA-2 at Wikipedia
SHA-3 at Wikipedia
1
vote
0
answers
93
views
Coursera Course or book(s) That covers the following subjects: OPENSSL, SSH, PKI, MD5, RSA, Certificates, keys, signatures
I started working as a developper in a cryptography company 3 months ago where the applications are for mostly windows applications. I found that I don't have enough knowledge concerning the topics ...
6
votes
2
answers
595
views
Is there an English translation of Vigenère's "Traicté des Chiffres"?
I Googled Vigenère's "Traicté des Chiffres": no English translations, not even a reference to one. Perhaps someone's Google-wu is better than mine; I can't find it.
I'm slogging my way ...
0
votes
2
answers
98
views
How does authentication work differently between asymmetric and symmetric cryptography?
Must Bob and Alice establish a 'connection' before a symmetric or asymmetric encryption scheme is secure? If so, is there ever some expected plaintext whose decryption authenticates the users?
In ...
-1
votes
1
answer
329
views
How to hack pass-protected private RSA key
I know nothing about cryptography.
I must present a completed ASP project to my university that proves I have learned clingo. I have heard that the task of recovering the plaintext private RSA key ...
1
vote
1
answer
3k
views
AES MixColumns, Predefined Lookup 2D Tables, and Rcon Predefined Lookup 2D Table
I need a copy of the predefined 2D table lookup for AES MixColumns when the state is multiplied by 2 and 3, 9,11,13,14, and the Rcon predefined table. I have searched for them everywhere with no luck. ...
7
votes
0
answers
133
views
Amazon's anti-piracy: how many movies can $m$ conspirators leak?
Is there any existing academic literature about this application of traitor tracing?
A video streaming service has a new anti-piracy technique to identify customers who capture and share their ...
7
votes
1
answer
1k
views
Opinion from "military institution" about the academic work
A few years ago, I've heard about a harsh report from an American institution (I've forgotten which one, but it was something like the NSA) about IACR conferences. Which report could it be?
I think ...
3
votes
0
answers
215
views
Is there a source(book, thesis, paper) that explains Lattice basis reduction algorithms (LLL, HKZ) and provides an in depth analysis of the same?
I want to give a slight background about me: I've Bachelors in Computer Engineering and I've been interested in Cryptography since my college days and have been following the field ever since. I'm ...
2
votes
0
answers
145
views
Detailed running time analysis for Shamir secret sharing scheme
I am successfully working on Shamir's secret sharing scheme for few months. But the only issue I am facing is the calculation of theoretical time complexity.
Since I am from algorithmic background, I ...
2
votes
0
answers
41
views
Does anybody have test vectors for the LBlock block cipher?
LBlock is a lightweight block cipher with 64-80 bits block-key size, designed by a group of Chinese scholars. Does anybody have LBlock test vectors?
I am looking for test vectors, which contain the ...
2
votes
1
answer
521
views
Some information about zero knowledge proofs
How do I start studying Zero-Knowledge proofs? What are some good books and entry-level research papers on that topic? What are some prerequisites of the same?
2
votes
2
answers
92
views
Use of Lamport's Signature as a primitive
Is Lamport's One Time Signature used as a primitive to construct any other cryptographic protocols?
5
votes
1
answer
196
views
Cryptography on programming
In pursuit of understanding a randomly found topic I was interested in learning the connection between integer programming and cryptography and found Lenstra Jr.'s Integer Programming and Cryptography....
4
votes
0
answers
322
views
Cryptomania and NP $\cap$ co-NP
Cryptomania is usually presented as the Impagliazzo's world, which gives us public-key cryptography under the assumption that trapdoor OWFs exist.
For purposes of constructing public-key cryptography ...
1
vote
0
answers
96
views
References on lattice-based cryptography [duplicate]
I need earlier references (books, articles, etc) on lattice-based cryptography, and any advice will be helpful to me. I am reading Stinson & Paterson's Cryptography: theory and practice. Thanks in ...
3
votes
0
answers
145
views
What is the Indexed Code Book Mode?
While reading specsheets for NXP processors (example mention in this PDF) the other day I saw the mention of the Indexed Code Book mode (ICB) for their AES acceleration hardware - the only mode they ...
1
vote
0
answers
38
views
Threshold signature verified by an equivalent key
I am looking for references for the following problem:
Consider we have a DSA with the keypair $(sk, pk)$ and a message $m$, such that its signature is $s = sig(m,sk)$ and the verification result is $...
19
votes
2
answers
7k
views
Use case for extendable-output functions (XOF) such as SHAKE128/SHAKE256
FIPS 202 defines 2 functions, SHAKE128 and SHAKE256, as extendable-output functions (XOFs) that can have variable output length. But in Appendix A.2 marks:
it is possible to use an XOF as a hash ...
2
votes
2
answers
54
views
What is $z_b$ in this introduction to Private Information Retrieval?
I was trying to read this introduction to private information retrieval. On page 12 of the document, a scheme for 1-DB private information retrieval is discussed. I was unable to understand one of the ...
5
votes
1
answer
4k
views
Where in the FIPS documents is it stated that SHA-1 is not secure?
SHA-1 has not been secure for a very long time, but I still can see
it here.
Where in the FIPS documents did it state that SHA-1 is not secure?
3
votes
0
answers
289
views
What is the original paper of the length extension attack on hash based MAC functions
A message authentication code (MAC) based on using a hash function with the secret prefix $H(k||m)$ technique goes back to two independent sources according to Tsudik's article on 1992;
S. Crocker, S....
4
votes
1
answer
1k
views
How are the IVs of SHA-512/256 and SHA-512/224 calculated?
This seems odd to me, because there are a lot of resources out there saying that the initializer values of SHA-512 and SHA-384 are the first 64 bits of the fractional parts of the square roots of ...
7
votes
2
answers
530
views
Why does NIST say that 2nd preimage resistance depends on the message length
In NIST FIPS 202 on the table, It is written as
Function
Output Size
Collision
PreImage
2nd Preimage
SHA-1
160
< 80
160
160–L(M)
SHA-224
224
112
224
min(224, 256–L(M))
SHA-512/224
224
112
224
...
18
votes
2
answers
2k
views
Is Bruce Schneier Applied Cryptography, Second ed. up to date?
I like Applied Cryptography, and I am returning to cryptography after a while. So I am wondering if that book is up to date or can be complemented with other references.
I am looking for a book, ...
3
votes
2
answers
308
views
Do Korea and Japan have their own national hashing standard?
I know China has SM3 and SM4 commercial cryptographic hash and block cipher standards, and I know Japan has Camellia block cipher and Korea has SEED. Do Japan and Korea have an industry standard for ...
3
votes
4
answers
393
views
What is the quantum-resistant signature scheme with the smallest signature + pubkey?
After playing cat and mouse with an number of quantum-resistant signature schemes and coming up with nothing with small enough signatures, I'm turning to Crypto.SE. I need a quantum-resistant ...
1
vote
1
answer
153
views
Security analysis of Rijndael (AES)
I was studying the Rijndael Block Cipher for an assignment. I am looking for a (layman-ish) explanation as to why the cipher is secure. Googling did not seem to be give any good explanations. The ...
1
vote
1
answer
139
views
Can you point me to an MDS table reference for the Kalyna cipher?
I'm working with cipher Kalyna.
Kalyna — like AES — has MDS tables in its MixColumns step. But Kalyna's documentation doesn't list these MDS tables.
Could you give me a hint where to find proper ...
3
votes
1
answer
138
views
References about a boolean function involving hamming weight
Some weeks ago, I read an article about an interesting boolean function with some applications to cryptography. Then, I forgot about the article and now I cannot find it. Hence here I am asking if ...
0
votes
1
answer
139
views
Is there any code available online for CHA-1? [closed]
Is there any code available online for the chaos-based hash algorithm CHA-1?
I am trying to apply the methodology of this paper to blockchain applications.
3
votes
0
answers
59
views
Applications of Shuffle Proofs
Shuffle proofs enable a prover to show that a vector of commitments or encryptions $(c_1, \dots, c_n)$ is permuted into a vector of commitments $(c'_1, \dots, c'_n)$ without revealing the permutation ...
5
votes
0
answers
344
views
Computationally binding commitment
A Computationally Binding commitment scheme is defined as a tuple of protocols $(\mathsf{Keygen}, \mathsf{Com}, \mathsf{Open})$, that along with correctness guarantees that for all PPT algorithms the ...
0
votes
1
answer
566
views
Argument of Knowledge - Definition
I've recently understood the difference between Interactive Proofs and Arguments, but even if several standard variations of IP are well known and thoroughly described in textbooks (Goldreich for ...
19
votes
2
answers
5k
views
What is "witness encryption"?
I recently skimmed over tho papers on time-lock encryption:
“Time-release Protocol from Bitcoin and Witness Encryption for SAT” by Liu, Garcia, and Ryan
“How to Build Time-Lock Encryption” by Jager
...
1
vote
0
answers
46
views
OAuth(2) and friends
I've worked on low-level security (side-channel attacks etc.) for years and have a PhD in crypto. Web security is something I've never needed to touch beyond knowing how the TLS handshake works with ...
35
votes
4
answers
18k
views
Is there a string that's hash is equal to itself?
I was wondering if there's any string that has a hash equal to itself, so that – when using any (none specific) hash function – the hash would be equal to that string?
so that:
...
0
votes
1
answer
399
views
Attacks on LCG with "self-XOR" output function?
Consider an ordinary LCG modulo $2^n$ with an internal state of $n$ bits and an output of $n/2$ bits, with the twist that instead of simply truncating the state to produce an output, we take the upper ...
5
votes
2
answers
896
views
Discrete Logarithm problem with inverse
Let $\mathbb G$ be a cyclic group of order $q$. The Discrete Logarithm Problem (DLP) is, given $g, g^x \in \mathbb G$, to compute $x \in \mathbb Z_q $.
I'm interested to know if there is a known ...
1
vote
0
answers
159
views
Rivest - Time Memory Tradeoff Using Distinguished Points
A while ago, Hellman introduced a time-memory tradeoff for chosen plaintext attack on block ciphers.
There is an innovation due Rivest using a concept of 'distinguished points'. I am looking for the ...
2
votes
2
answers
394
views
Is there a symmetric cipher that is explicitly designed to be slow?
I am trying to find a symmetric cipher that is explicitly designed to be slow. I realize that this is generally not desirable, but I'd like many cycles and lots of electronic action. I could modify ...
1
vote
1
answer
73
views
Is there a simplified article, video, or blog about bulletproofs?
I'm trying to learn about bulletproofs for my master "Enhancing Privacy in E-voting Systems", but the original paper was too hard for me. I also tried to look at this, but it was also too difficult. ...
1
vote
0
answers
323
views
Pohlig-Hellman exponentiation block cipher
Let $G$ be a group of order $n$ and let $e,d$ be integers such that $ed\equiv 1 \pmod{n}$. Then the exponentiation maps $x \mapsto x^e$ and $y \mapsto y^d$ are inverse maps on $G$.
These maps give us ...
0
votes
0
answers
271
views
KDF3 - implementation explanation
An old project that I did not code is using the KDF3 algorithm, but I struggle to find an explanation about the way this key derivation algorithm works.
I know that this algorithm is part of the ISO-...