Questions tagged [reference-request]

A reference request is a request to be provided with a source from documentation, official papers, and specs related to one or more specific algorithms or cryptographic procedures. Open ended literature recommendation requests are off topic! Also: Crypto.SE is not an optimal replacement for a search engine. The reference-request tag is not something that provides a base to replace research efforts.

Filter by
Sorted by
Tagged with
0 votes
0 answers
27 views

Looking for a authoritative reference on DER (X.509 etc) encoding standards

I'm writing a paper on parsing DER. DER the canonical sister of BER, when it comes to encoding ASN.1, with emphasis on shortest possible encoding. One of the properties that I seek to assure myself of,...
2 votes
1 answer
712 views

Clarification of the provable cryptography controversies

I read about the provable cryptography in Wikipedia. The article referred to tense controversies around 2007. Do these controversies still exist? What is the substitution for the provable-security? Is ...
3 votes
2 answers
896 views

Confusion and diffusion misunderstanding

I am reading the book titled "Algebra for Cryptologists". The author defined the confusion and the diffusion as follows: Confusion: Confusion is intended to make the relationship between the ...
-1 votes
1 answer
110 views

Neural Network based on pseudorandom number

Recently, I read this paper NEURAL NETWORK BASED CRYPTOGRAPHY. Under the section 3.1 it said: The aim is to improve the randomness of the random numbers generated by any algorithm using an NN. In ...
10 votes
2 answers
2k views

Why cannot I assume that cryptography published in venues/journals handled by the same publishers as prestigious journals is serious?

I do not know if it is allowed to ask this question. I have been told that "most of the papers on chaos-based cryptography are appearing in fee/generalist journals, whose focus is not security&...
6 votes
1 answer
312 views

Introduce a reference for cryptanalysis of WhatsApp software

I am studying on cryptanalysis of WhatsApp software. I know this is secure software but I want to present a documentary on this topic as a seminar at the university for applied mathematics students. ...
20 votes
2 answers
34k views

Does SHA-1024 hash exist?

Does SHA-1024 cryptographic hash function exist similarly to SHA-512? If not, what's the reason for that? Links: SHA-2 at Wikipedia SHA-3 at Wikipedia
1 vote
0 answers
93 views

Coursera Course or book(s) That covers the following subjects: OPENSSL, SSH, PKI, MD5, RSA, Certificates, keys, signatures

I started working as a developper in a cryptography company 3 months ago where the applications are for mostly windows applications. I found that I don't have enough knowledge concerning the topics ...
6 votes
2 answers
595 views

Is there an English translation of Vigenère's "Traicté des Chiffres"?

I Googled Vigenère's "Traicté des Chiffres": no English translations, not even a reference to one. Perhaps someone's Google-wu is better than mine; I can't find it. I'm slogging my way ...
0 votes
2 answers
98 views

How does authentication work differently between asymmetric and symmetric cryptography?

Must Bob and Alice establish a 'connection' before a symmetric or asymmetric encryption scheme is secure? If so, is there ever some expected plaintext whose decryption authenticates the users? In ...
-1 votes
1 answer
329 views

How to hack pass-protected private RSA key

I know nothing about cryptography. I must present a completed ASP project to my university that proves I have learned clingo. I have heard that the task of recovering the plaintext private RSA key ...
1 vote
1 answer
3k views

AES MixColumns, Predefined Lookup 2D Tables, and Rcon Predefined Lookup 2D Table

I need a copy of the predefined 2D table lookup for AES MixColumns when the state is multiplied by 2 and 3, 9,11,13,14, and the Rcon predefined table. I have searched for them everywhere with no luck. ...
7 votes
0 answers
133 views

Amazon's anti-piracy: how many movies can $m$ conspirators leak?

Is there any existing academic literature about this application of traitor tracing? A video streaming service has a new anti-piracy technique to identify customers who capture and share their ...
7 votes
1 answer
1k views

Opinion from "military institution" about the academic work

A few years ago, I've heard about a harsh report from an American institution (I've forgotten which one, but it was something like the NSA) about IACR conferences. Which report could it be? I think ...
3 votes
0 answers
215 views

Is there a source(book, thesis, paper) that explains Lattice basis reduction algorithms (LLL, HKZ) and provides an in depth analysis of the same?

I want to give a slight background about me: I've Bachelors in Computer Engineering and I've been interested in Cryptography since my college days and have been following the field ever since. I'm ...
2 votes
0 answers
145 views

Detailed running time analysis for Shamir secret sharing scheme

I am successfully working on Shamir's secret sharing scheme for few months. But the only issue I am facing is the calculation of theoretical time complexity. Since I am from algorithmic background, I ...
2 votes
0 answers
41 views

Does anybody have test vectors for the LBlock block cipher?

LBlock is a lightweight block cipher with 64-80 bits block-key size, designed by a group of Chinese scholars. Does anybody have LBlock test vectors? I am looking for test vectors, which contain the ...
2 votes
1 answer
521 views

Some information about zero knowledge proofs

How do I start studying Zero-Knowledge proofs? What are some good books and entry-level research papers on that topic? What are some prerequisites of the same?
2 votes
2 answers
92 views

Use of Lamport's Signature as a primitive

Is Lamport's One Time Signature used as a primitive to construct any other cryptographic protocols?
5 votes
1 answer
196 views

Cryptography on programming

In pursuit of understanding a randomly found topic I was interested in learning the connection between integer programming and cryptography and found Lenstra Jr.'s Integer Programming and Cryptography....
4 votes
0 answers
322 views

Cryptomania and NP $\cap$ co-NP

Cryptomania is usually presented as the Impagliazzo's world, which gives us public-key cryptography under the assumption that trapdoor OWFs exist. For purposes of constructing public-key cryptography ...
1 vote
0 answers
96 views

References on lattice-based cryptography [duplicate]

I need earlier references (books, articles, etc) on lattice-based cryptography, and any advice will be helpful to me. I am reading Stinson & Paterson's Cryptography: theory and practice. Thanks in ...
3 votes
0 answers
145 views

What is the Indexed Code Book Mode?

While reading specsheets for NXP processors (example mention in this PDF) the other day I saw the mention of the Indexed Code Book mode (ICB) for their AES acceleration hardware - the only mode they ...
1 vote
0 answers
38 views

Threshold signature verified by an equivalent key

I am looking for references for the following problem: Consider we have a DSA with the keypair $(sk, pk)$ and a message $m$, such that its signature is $s = sig(m,sk)$ and the verification result is $...
19 votes
2 answers
7k views

Use case for extendable-output functions (XOF) such as SHAKE128/SHAKE256

FIPS 202 defines 2 functions, SHAKE128 and SHAKE256, as extendable-output functions (XOFs) that can have variable output length. But in Appendix A.2 marks: it is possible to use an XOF as a hash ...
2 votes
2 answers
54 views

What is $z_b$ in this introduction to Private Information Retrieval?

I was trying to read this introduction to private information retrieval. On page 12 of the document, a scheme for 1-DB private information retrieval is discussed. I was unable to understand one of the ...
5 votes
1 answer
4k views

Where in the FIPS documents is it stated that SHA-1 is not secure?

SHA-1 has not been secure for a very long time, but I still can see it here. Where in the FIPS documents did it state that SHA-1 is not secure?
3 votes
0 answers
289 views

What is the original paper of the length extension attack on hash based MAC functions

A message authentication code (MAC) based on using a hash function with the secret prefix $H(k||m)$ technique goes back to two independent sources according to Tsudik's article on 1992; S. Crocker, S....
4 votes
1 answer
1k views

How are the IVs of SHA-512/256 and SHA-512/224 calculated?

This seems odd to me, because there are a lot of resources out there saying that the initializer values of SHA-512 and SHA-384 are the first 64 bits of the fractional parts of the square roots of ...
7 votes
2 answers
530 views

Why does NIST say that 2nd preimage resistance depends on the message length

In NIST FIPS 202 on the table, It is written as Function Output Size Collision PreImage 2nd Preimage SHA-1 160 < 80 160 160–L(M) SHA-224 224 112 224 min(224, 256–L(M)) SHA-512/224 224 112 224 ...
18 votes
2 answers
2k views

Is Bruce Schneier Applied Cryptography, Second ed. up to date?

I like Applied Cryptography, and I am returning to cryptography after a while. So I am wondering if that book is up to date or can be complemented with other references. I am looking for a book, ...
3 votes
2 answers
308 views

Do Korea and Japan have their own national hashing standard?

I know China has SM3 and SM4 commercial cryptographic hash and block cipher standards, and I know Japan has Camellia block cipher and Korea has SEED. Do Japan and Korea have an industry standard for ...
3 votes
4 answers
393 views

What is the quantum-resistant signature scheme with the smallest signature + pubkey?

After playing cat and mouse with an number of quantum-resistant signature schemes and coming up with nothing with small enough signatures, I'm turning to Crypto.SE. I need a quantum-resistant ...
1 vote
1 answer
153 views

Security analysis of Rijndael (AES)

I was studying the Rijndael Block Cipher for an assignment. I am looking for a (layman-ish) explanation as to why the cipher is secure. Googling did not seem to be give any good explanations. The ...
1 vote
1 answer
139 views

Can you point me to an MDS table reference for the Kalyna cipher?

I'm working with cipher Kalyna. Kalyna — like AES — has MDS tables in its MixColumns step. But Kalyna's documentation doesn't list these MDS tables. Could you give me a hint where to find proper ...
3 votes
1 answer
138 views

References about a boolean function involving hamming weight

Some weeks ago, I read an article about an interesting boolean function with some applications to cryptography. Then, I forgot about the article and now I cannot find it. Hence here I am asking if ...
0 votes
1 answer
139 views

Is there any code available online for CHA-1? [closed]

Is there any code available online for the chaos-based hash algorithm CHA-1? I am trying to apply the methodology of this paper to blockchain applications.
3 votes
0 answers
59 views

Applications of Shuffle Proofs

Shuffle proofs enable a prover to show that a vector of commitments or encryptions $(c_1, \dots, c_n)$ is permuted into a vector of commitments $(c'_1, \dots, c'_n)$ without revealing the permutation ...
5 votes
0 answers
344 views

Computationally binding commitment

A Computationally Binding commitment scheme is defined as a tuple of protocols $(\mathsf{Keygen}, \mathsf{Com}, \mathsf{Open})$, that along with correctness guarantees that for all PPT algorithms the ...
0 votes
1 answer
566 views

Argument of Knowledge - Definition

I've recently understood the difference between Interactive Proofs and Arguments, but even if several standard variations of IP are well known and thoroughly described in textbooks (Goldreich for ...
19 votes
2 answers
5k views

What is "witness encryption"?

I recently skimmed over tho papers on time-lock encryption: “Time-release Protocol from Bitcoin and Witness Encryption for SAT” by Liu, Garcia, and Ryan “How to Build Time-Lock Encryption” by Jager ...
1 vote
0 answers
46 views

OAuth(2) and friends

I've worked on low-level security (side-channel attacks etc.) for years and have a PhD in crypto. Web security is something I've never needed to touch beyond knowing how the TLS handshake works with ...
35 votes
4 answers
18k views

Is there a string that's hash is equal to itself?

I was wondering if there's any string that has a hash equal to itself, so that – when using any (none specific) hash function – the hash would be equal to that string? so that: ...
0 votes
1 answer
399 views

Attacks on LCG with "self-XOR" output function?

Consider an ordinary LCG modulo $2^n$ with an internal state of $n$ bits and an output of $n/2$ bits, with the twist that instead of simply truncating the state to produce an output, we take the upper ...
5 votes
2 answers
896 views

Discrete Logarithm problem with inverse

Let $\mathbb G$ be a cyclic group of order $q$. The Discrete Logarithm Problem (DLP) is, given $g, g^x \in \mathbb G$, to compute $x \in \mathbb Z_q $. I'm interested to know if there is a known ...
1 vote
0 answers
159 views

Rivest - Time Memory Tradeoff Using Distinguished Points

A while ago, Hellman introduced a time-memory tradeoff for chosen plaintext attack on block ciphers. There is an innovation due Rivest using a concept of 'distinguished points'. I am looking for the ...
2 votes
2 answers
394 views

Is there a symmetric cipher that is explicitly designed to be slow?

I am trying to find a symmetric cipher that is explicitly designed to be slow. I realize that this is generally not desirable, but I'd like many cycles and lots of electronic action. I could modify ...
1 vote
1 answer
73 views

Is there a simplified article, video, or blog about bulletproofs?

I'm trying to learn about bulletproofs for my master "Enhancing Privacy in E-voting Systems", but the original paper was too hard for me. I also tried to look at this, but it was also too difficult. ...
1 vote
0 answers
323 views

Pohlig-Hellman exponentiation block cipher

Let $G$ be a group of order $n$ and let $e,d$ be integers such that $ed\equiv 1 \pmod{n}$. Then the exponentiation maps $x \mapsto x^e$ and $y \mapsto y^d$ are inverse maps on $G$. These maps give us ...
0 votes
0 answers
271 views

KDF3 - implementation explanation

An old project that I did not code is using the KDF3 algorithm, but I struggle to find an explanation about the way this key derivation algorithm works. I know that this algorithm is part of the ISO-...

1
2
3 4 5
9