# All Questions

11 views

### El Gamel Decryption

I'm new in cryptography, I have an exercise about ElGamal decryption but no idea how to solve it . How can i I find the plaintext with below information???? Please somebody help me. public key ...
18 views

### Lightweight hash function

I am researching about lightweight hash functions and I've got two related questions: What is the standard or requirement for a hash function in general to be considered lightweight ? Why can it be ...
14 views

### What is this code? [on hold]

I've found this piece of something df067aa92779f3f8441598d1f214455359675a77 Any ideas what could it be and how to decypher it?
38 views

Having shared a pad of length double the length of your anticipated message, splitting it into x and y. Then using x to encrypt the message, and using y twice to encrypt the next pad, would that be ...
28 views

### Could you attack both them text (using different ciphers I designed and coded) and tell me what's wrong and what's good? [on hold]

Encrypted text (lzC) : zxxmr xkoht, fa zfni xr eabucgr qisl zgm rgzxtel rqx tzss ayqdk nqibh iku nmgok skeh! iwir cj ttakn qs tituxo Encrypted text (lll) : kdgcb yibkt, ed wenj qh nvplzeg gpqa eoh ...
40 views

### LED cryptography algorithm

I would like to better understand the operation of the LED algorithm, especially the process of substitution and permutation of the blocks and especially the use of the keys in each round. The keys ...
30 views

### Secure Channel - Encryption and Decryption Keys For A Message

I'm currently reading Cryptography Engineering and in Chapter 7, the topic of secure channel is discussed. The channel described is using CTR for encryption. Below I include images with pseudo-code ...
28 views

### Authenticating small packets

I intend to authenticate small packets of data, between 16 and 256 bytes each. For some of them encryption will also be required. This will be used on small micro controllers, with RAM sizes ranging ...
14 views

### E voting system using Pailler Cryptosystem

What would be the protocols that will use to implement a e-voiting system based on Pailler cryptosystem? and how will it implement? If you can please give some references to further read on this ...
35 views

### ElGamal Generator g problem

Having an ElGamal encryption scheme with p=19 which value can not be assigned to g? The answers were : 1,7,11,2 I think you can't assign value 1 to g.
31 views

I have this curve in E(F131) : $$Y^2 = X^3 + X + 2$$ I want calculate the sum P + Q considering that $$P= (5,1)$$ and $$Q = (60, 49)$$ For calculate the result i use these formulas:  xr = ...
28 views

### Winternitz Signature Scheme Verfication

I am reading page 39 in this "Post Quantum Cryptography" book. Why does equation 15 hold? There is no further knowledge about f and you definitely cannot use any power laws. So, why is ...
29 views

### Constructing set membership proof for private set

Is it possible to construct a set membership proof to show $\delta \in \Psi$ where $\delta$ is publicly known and $\Psi$ should stay only known to the prover? It seems rather impossible but I would ...
49 views

### My attempt of solving socialist millionaire. Is it good?

I've come up with an algorithm to solve the socialist millionaire problem, but I'm not sure if the algorithm is secure. I wasn't able to find any flaw in it, but it seems too simple to be secure, so ...
17 views

### AES Encryption using CBC/PKCS5 padding in python while decrypting in java it is given below error

Can any one help me while encrypting using CBC/PKCS5 padding in python while decrypting in java it is given below error javax.crypto.BadPaddingException: Decryption error at ...
12 views

### What is padding PKCS5? How to encrypt the text data using IV key AES/CBC/PKCS5 in Python

hi am new to python coding,can anyone please give me exact information rearding PCKS5 padding and then about the encryption using IV key AES/CBC/PKCS5 in Python
35 views

### Can you identify this algorithm? [on hold]

We are attempting to integrate our application in to a third party system. To do this we need to pass encrypted passwords in to this system. I have decompiled the assembly and looking at the code it ...
21 views

### Differences between HMAC and HKDF in a specific case

I want to use a key derivation function to derive a key to another one. I think HKDF is the easiest solution in my case. The following picture gives a clear definition of it : ...
40 views

### security in format preserving encryption

In format preserving encryption an attacker knows the format and data type of the plain text. The format of the plain text and cipher text are same. usually cipher text are unreadable form. then how ...
74 views

### Can AES be considered as Perfectly Secure?

I am studying about the AES encryption standard, and as I know from the theory there is no known weaknesses today about this block-cipher. I would like to find out or at least to understand what ...
25 views

### What is the right notion of security to use for file encryption?

It seems that several file encryption systems do NOT use authenticated encryption. (E.g. gpg --symmetric and boxcryptor as far as I can determine). I understand that this is generally considered ...
27 views

### Is there a mental poker algorithm that does not rely on commutative encryption?

The algorithm for mental poker that I saw on Wikipedia and everywhere else relies on an encryption algorithm such that $E_k(E_j(P)) = E_j(E_k(P))$, but I can't find a modern and secure algorithm for ...
74 views

### About Primitive roots mod n in Diffie-Hellman

I'm on the study of Diffie-Hellman and its related math (multiplicative group of integers $\mod n$). In some crypto papers and documents I've read that $g$ needs to be a primitive root mod $n$ ($g$ ...
29 views

### Why does OMAC2 exist?

The specification for OMAC has the following to say about OMAC2: For OMAC2, we adopted u−1 instead of u2 as Cst2. It requires one right shift to compute L· u−1 instead of one left shift to compute ...
34 views

### DPA Attack on HMAC SHA-256

I have read the paper "Differential Power Analysis of HMAC SHA-2 in the Hamming Weight Model" (http://www.di.ens.fr/~belaid/articleHMAC.pdf) and I want to understand the DPA Attack. In section 3.2.1 ...
89 views

### Fast PKI for embedded device

We are creating a device with a small microcontroller (20 MHz CPU 16 KiB RAM). We need some way to securely send signed files to device (only signature, no encryption necessary). An external company ...
15 views

### Encoding info for different SaaS users [on hold]

My company is developing a management software and we want it to be SaaS. Now we face a crucial question: how do we ensure our clients that we cannot access their data from the server? Which is the ...
27 views

### What are these: b04bmtpf b00k8fdx b052hdnr b04d4p0b [on hold]

I'm trying to understand how the BBC sets its URLS. Each program on the BBC has a url like http://www.bbc.co.uk/programmes/b04bmtpf or http://www.bbc.co.uk/programmes/b04d4p0b Where the last 8 ...
26 views

### Is end to end email encryption possible without unique domain/subdomain for each user? [on hold]

Lets say Alice@gmail.com wants to send message to Bob@secureMail.com Alice <--> gmail.com <--> secureMail.com <--> Bob We know gmail.com can read the unencrypted message. Is it possible for ...
25 views

### Reducing the degree of polynomial descripting a block cipher [on hold]

Any one knows about Reducing the degree of polynomial descripting a block cipher? Regards.
52 views

### How to decrypt a PGP message with only the two primes and the public exponent?

I'm trying to decrypt a PGP Message that is encrypted with an RSA key, but I only have this information: Public exponent: 65537 Prime 1: ...
52 views

### Operation modes of block ciphers how are used?

I am studying about different operation modes of block ciphers my question isn't something specific to that, but is how these operation modes are used in cryptography? I have this picture here ...
24 views

I'm quite new to the topic and read a bit about poodle and padding oracle. I quite understand the "regular" padding oracle attack, substituting the last byte of block(n-1) to determine the last byte ...
46 views

### One-time-pad with multiplication [on hold]

Does a one-time-pad with multiplication instead of xor between the message and the key introduces security problems?
39 views

### Non-interactive zero-knowledge proof for discrete logarithm without random oracle

Is there any non-interactive zero-knowledge proof for discrete logarithm without random oracle over the group $\mathbb Z_p$?
113 views

### Why don’t all AES encryption tools produce the same key from the same password?

Alice and Bob meet regularly. They have agreed face-to-face a 128 bit password which they want use to encrypt/decrypt emails written between them. They decide to use 256-bit AES. Alice wrote her ...
41 views

### Does the encryption algorithm DES perform random permutations? If so how is information not lost?

"Before round 1 begins, all 64 bits of an incoming message and all 56 bits of the secret key are seperately permuted (shuffled)" My question is this : Is the shuffling of the bits performed randomly? ...
42 views

### Why is public key cryptography not widely used in governments? [on hold]

Are there any practical limitations? Govt driving license, passport, SSN could be digitally signed making it easy for anyone to validate. They can have a qr code in them which can be easily validated ...
236 views

### What does a stream cipher provide that cannot be obtained with AES CTR mode operation?

I can precompute the key stream for the CTR mode operation and the encryption at that point is similar to a stream cipher. So why are there stream ciphers still used and proposed after RC4? Recently ...
53 views

### One time pad in CBC mode?

I have been searching about if it is more secure to use CBC mode in OTP but I can't find anywhere where people have sad that it is more secure. Question: Is CBC mode in OTP more secure? Because I ...
16 views

### Type 1 pairings and encoding function from $\mathbb G_T$ to $\mathbb G$

Let $e : \mathbb G \times \mathbb G \to \mathbb G_T$ be a Type 1 bilinear pairing. Is it possible to define an encoding function $E : \mathbb G_T \to \mathbb G$? If so, how could this encoding ...
143 views

### Sharing a secret key between many users

I would like to know if there is any security issue in sharing a secret key (of an asymmetric cryptography) between several users. I know that this secret key is no longer "secret", so it's no longer ...
32 views

### Bilinear pairing arithmetic - cryptographic accumulators

For calculating accumulated values for set of elements chosen randomly from say ${ e_1 ,e_2,...e_n}\varepsilon X$ we use the formula $acc= g^{f(e,s)}$ where $f(e,s)= (e_1+s)(e_2+s).....(e_n+s)$ ...
65 views

### What is the difference between H(M) and H3(M, s, IDA)? [on hold]

What is the difference between H(M) and H3(M, s, IDA)? I am aware of Hash function with a Message and a Key, but there are three parameters in: H3(M, s, IDA). Here M is the message, s is the key, ...
21 views

### Are covert and rational adversaries same?

Aumann and Lindell defined covert adversaries in 2009 which is informally adversaries which have a epsilon-deterrence to cheat. Some authors (for ex. John R. Wallrabenstein) have defined similar ...
36 views

### PGP public RSA key format

I have been trying to use Go (I could post the code, but I think I posted enough already...) to generate a PGP RSA key. However every time I try to encrypt something with it, something fails. However, ...
38 views

### How can I tell how a text was encrypted? [closed]

How can I tell what encryption method was used to encrypt this text below? I noticed this sequence repeats "C04D57B02B2B61C4", could that be a hint? It also has leading zeroes, does that point to any ...
45 views

### Cryptographic enforcement schemes using Diffie-Hellman

If one wants to set up a decentralized cryptographic enforcement scheme in which the level of 'confidentiality' of information is marked by its position in a poset, why not use Diffie-Hellman to ...