# All Questions

283 views

### Stream Cipher : Never use stream cipher key more than once [duplicate]

Possible Duplicate: Taking advantage of one-time pad key reuse? How does one attack a two-time pad (i.e. one time pad with key reuse)? Denote C is cipher text, m is message, and PRG(k) is ...
19 views

### AES— Brute force attack versus Known plain text attack

I am taking a codes and cryptology course and the following is a questions on a past exam that I could not and still can't solve: ...
15 views

### Why is it hard to calculate Logarithm on Diffie Hellman?

i read something about Diffie Hellman. What i don't understand: Alice selects a randomly generated Number, calculates X = g^x mod p and sends X to Bob. If she calculates g^x, she needs to calcluate ...
74 views

### What are these twist attacks with cost $2^{58.4}$ on NIST P-224 curve, and when do they apply?

This page on Twist security mentions a combined attack and a twist rho attack, applicable in particular to NIST P-224 curve with cost $2^{58.4}$ something, with no mention precise definition of ...
29 views

### Why develop new stream ciphers when block ciphers can be trivally made into streams?

I've just been reading about a new drop-in replacement for the RC4 stream cipher, but why develop new stream ciphers when AES can be made into a stream with a little XORing?
13 views

### Can The Following Be Considered A Valid Searchable Encryption Scheme?

I'm currently doing some research into Searchable Symmetric Encryption (SSE) for my masters degree and I've read most of the original literature on the topic. For the software artifact part of my ...
20 views

### How to add our created session encryption algorithm to (major) browser using OpenSSL

I want to add my encryption algorithm called FooSymmetricAlgorithm for encrypting data using SSL protocol. It will be added to OpenSSL. I will use RSA for handshake ...
21 views

### Symmetric vs non-symmetric pairing based crypto

I am trying to find a comparison of how different pairing-friendly elliptic curves perform (in terms of security) in real world applications; I am using PBC library, and it has type A curves and type ...
30 views

### Are there any digital signature algorithms in common use that result in 32-byte signatures?

I don't consider myself to be an expert in this field, so forgive me if there is an obvious answer. I am having a tough time finding an algorithm that can sign data and output a 32-byte signature, ...
68 views

28 views

### Serpent 256bit Non bit sliced version (Table Sbox/IP/FP/LT/ILT)

Good afternoon! I got some mismatches while counting Round Keys at non bitsliced version of Serpent. I have used official AES submission outputs (file ecb_iv.txt). AES submission package test vector: ...
48 views

### What are SNARKs?

What does it mean and what is it used for, I have been hearing this term a lot lately. From the context I've heard it talked about it seems to be connected with zero knowledge?
17 views

### Is equal length of primes in Paillier cryptosystem is mandate for security reasons?

In continuation to this question about length of primes , I am in doubt about the restriction on length of primes itself . In Paillier cryptosystem , equal length of primes are used . My doubt is ...
20 views

### Low exponent attack against RSA

According to this: http://www.cims.nyu.edu/~regev/teaching/lattices_fall_2004/ln/rsa.pdf One can calculate the message m, if there was no padding scheme involved. My question: is it possible to find ...
10 views

### Help in uderstanding NIZKPoK notation (and how to code it) needed

Hello fellow cryptographers I have a rather silly question for you; I am aware of how Schnorrs NIZKPoK / SoK works when someone must prove knowledge about DL: y = g^x; (and how to code it) RFC ...
84 views

### PGP String to Key specifiers

I've been reading through the PGP Standard and here I'm a little confused. This section is discussing converting string data to a session key. I'm confused about the paragraph in bold. First off, what ...
45 views

### How can a good pseudo-random number genarator be made?

I am trying to make a pseudo-random number genarator so that I can use it in a synchronous stream cipher for encrypting plain text. I want it to genarate numbers which are as random as possible. Can ...
29 views

### DLOG in $\mathbb{F}_{p^n}^*$?

Assume that we are given an element $g\in \mathbb{F}_{p^n}^*$ and $g$ does not belong to any of the smaller subfields contained in $\mathbb{F}_{p^n}$. If the degree of $g$ is some number $q$, how much ...
36 views

### Public key encryption without ciphertext expansion

Say I have a database column that is defined as VARCHAR(255) that stores names. I can assume that names can be up to 255 chars. I need a public key encryption so that I can replace names with their ...
27 views

How bad is the following strategy for a password manager on a local machine? The user wants to sign up for somesite.com where he needs a password. The user has previously generated a secret key ...
664 views

### Are there cryptographic hash functions that can be computed using only paper and pen without leaking any information about the plaintext?

I am looking for a cryptographic hash function that can be computed by a human using only paper and pen without ever leaking any information about the plaintext on the paper. The cryptographic hash ...
19 views

### Direct sum of Binary numbers In Mixcolumns

I have just started learning cryptography and I am trying to make sense of the direct sum on some binary numbers. I am trying to find a column of a state space after a Mixcolumns operation has been ...
55 views

### Encrypting twice with same key gives back plain text

I read in the answer here that when encrypting twice the plain text with same key could result in plain text as shown below $encrypt_{key}((encrypt_{key}(plain)) = plain$ Which block-cipher ...
97 views

### Encryption algorithm designed to be easy to decrypt by machine but impractical to decrypt by hand

I am looking for - or considering the design of a new - encryption algorithm that does not use variable keys, such that it is easy for a computer to encrypt and decrypt any message regardless of its ...
65 views

### Understanding Twist Security with respect to short Weierstrass curves

I'm trying to understand the "Invalid-curve attacks against ladders" section of SafeCurves Twist Security page and I have difficulties to apply it to short Weierstrass curves. That section claims ...
178 views

### How do you test randomness?

Suppose I receive a list of 1 million coinflips, and I want to know how likely it is that the list was randomly generated. My first thought would be to count the number of heads and tails, which ...
57 views

878 views

### Can you make a hash out of a stream cipher?

A comment on another question made me wonder about something: Assume you're on a rather constrained platform — say, a low-end embedded device — with no built-in crypto capabilities, ...
116 views

### Cryptographic Dilemma [on hold]

I'm reading an article where they are talking about 'the Cryptographic Dilemma. Is there one universal dilemma in cryptography? I can think of a few, like computation time vs. crackability. The ...
22 views

I found the term re-addition in https://www.hyperelliptic.org/EFD/g1p/auto-shortw-projective.html and I cannot figure out what it is. It has actually same complexity of addition and I dont see the ...
39 views

### About the Algebraic Normal Form (ANF) of S-Box in DES

I've thought up a way to represent the transformation of S-Box in DES by ANF. Let $x_i\;(1\le i\le 6)$ be the input of one S-Box, $y_i\;(1\le i\le 4)$ be the output, for example, then y_1= 1\oplus ...
67 views

### Why does openssl use SHA1 in ECC when I use secp384r1 curve

I need a small clarification that why openssl using SHA1 in ECC when I am using secp384r1 curve, but in rfc they are saying we should use SHA2. Thing here is am using nanoECC in my DTLS, nanoECC ...
60 views
+50

### A Doubt with the twisted-PRF

Recently I'm reading the paper 2-Pass Key Exchange Protocols from CPA-Secure KEM in CT-RSA 2014. I'm not quite understand the part of section4.2--Original Twisted PRF Trick. In the final of the ...
54 views

### Why does NTRUEncrypt lack a formal security proof?

Is there any particular reason why NTRUEncrypt lacks a formal security proof? That is, a demonstration that it achieves certain security notion (e.g. IND-CPA). I know there is a provable-secure ...
30 views

### A simple attack on DESX in time $2^{120}$

Let $\mathcal{M}$ be our message space and $\mathcal{K}$ our key space. Now, let $\mathrm{E} : \mathcal{K} \times \mathcal{M} \to \mathcal{M}$ be a block cipher. Define the block cipher ...
92 views

### Is there any probabilistic version of RSA?

I have now studying the RSA, but I think that is it possible to have some probabilistic version like a random bit string "r" XORed with the key? Is there any probabilistic version of RSA? Thak you ...
56 views

### public key certificate on TLS/SSL

Currently I am working on a public key certificate. I got a question: Why is a public key certificate needed for TLS/SSL? Wouldn't TLS/SSL itself is enough? What is the role of the certificate?
2k views

### Why is the IV passed in the clear when it can be easily encrypted?

The initialization vector (IV) is exclusive or'd against the plain text before encryption for the first block sent in order to prevent an attacker from learning that duplicate message blocks are being ...
29 views

### Interpretation of the results of NIST (p)NRG suite

I have problems interpreting the NIST (sts-2.1.2) suite results. After running the statistics with 100 samples (each sample of 1000000 byte length) a new prng i got this result: ...
45 views

### rsa public and private keys

I have a question about RSA key generation: this is a simple rsa algorithm: Choose p = 3 and q = 11 Compute n = p * q = 3 * 11 = 33 Compute ?(n) = (p - 1) * (q - 1) = 2 * 10 = 20 Choose e such that 1 ...
88 views

### RSA prove $a^{\varphi(n)/g} \equiv 1 \pmod{n}$

I should prove that $a^{\varphi(n)/g} \equiv 1 \pmod{n}$, so I thought I would prove it with primitive roots but I got stuck. Here is the assignment: Let $p, q$ be primes such that $p \ne q$. ...
65 views

### Why cbc-mac is a secure mac with psudo-random but not random IV?

Is cbc-mac a secure mac with pseudo-random function? If it is yes, Anyone can prove that? Also, is it based on the length of key? BUT why is not secure with a random IV?
48 views

### What can we say about x, y if B is prime, semiprime or even number? [on hold]

I have found method for integer factorization, where we are trying to find x,y. Let us emphasize two cases: a) Let $N=ab$, $b<a$ and $N\equiv 3(\textrm{mod }4)$ if we take $B=\frac{N+1}{4}$ ...
109 views

### What is a q-type assumption?

I've seen the term "$q$-type assumption" used in a few papers without a definition. A google search doesn't seem to come up with anything useful either (except the same papers without a definition). ...
59 views

### Are there any many to one encryption frameworks available?

I am reasonably new to the cryptography. For my use-case I need a method where in I would need a receiver to accept encrypted messages from a range of senders (each having their own, say, public key). ...
46 views

### General strategy for proving security of a scheme [on hold]

I see in many crypto papers, they prove the security of a scheme by defining an adversary that can break the scheme, and then reaching some sort of contradiction that a baseline protocol is also ...
I am learning about Hill Cipher and know that it is a block cipher where each block of n letters (considered as an $n$-component vector) is multiplied by an invertible $n \times n$ matrix, again ...