# All Questions

14 views

### Random Bytes in TLS Hadshake

During the TLS handshake, there are random bytes sent from the server to the client and random bytes sent from the client to the server. Since these bytes are sent in clear text, what is the ...
9 views

### What do you think of Wire.com crypto? [on hold]

I'm curious to know how the crypto community feels about Wire? And how it might compare to Signal crypto! https://wire.com/ https://github.com/wireapp
19 views

### Algorithms to test vs. generate primes

What would be the value in having a true prime number generator algorithm instead of a prime number test algorithm? Also, if such a thing existed, what would be the impact on not only cryptography?
10 views

### Bitcoin multi-sign and the amount of storage it required

I read this paper (Threshold-optimal DSA/ECDSA signatures and an application to Bitcoin wallet security), the authors said that in the optimal threshold signature that they propose players requires ...
24 views

### Why k-lists generalized birthday problem when $k=2$ is classical birthday problem?

David Wagner in his article A Generalized Birthday Problem in CRYPTO 2002 says that in k-dimensional (also k-lists) generalization of birthday problem (GBP), when $k=2$ "this is just the extremely ...
17 views

17 views

### How to show that any 2-round key-exchange protocol satisfying a given definition can be converted into a public-key encryption scheme?

How to show that any 2-round key-exchange protocol satisfying a given definition can be converted into a public-key encryption scheme that is CPA-secure? The given definition is as followed: ...
16 views

17 views

### Decoding base64 with key [on hold]

I'm working on a program that scrapes video URLs from a website. The URLs seem to be coded in base64. Here's an example: ...
21 views

### Is there a TLS extension for generating unique IVs for AES GCM?

Since reusing IVs is death for AES GCM, it seems like using the fixed IV in the TLS connection state is a phenomenally bad idea. It wouldn't even seem to be a good idea to use the salt + counter ...
17 views

### Message expansion in NTRU: why is it $\log_p(q)$-to-$1$?

Suppose that we are working with the original version of NTRU with parameters $(N,p,q,k,d_f,d_g,d_\phi)$. In this case we are working with the original NTRU with the digital envelope and the ...
13 views

### Cloning limitation of PCB [on hold]

Is it possible to clone the car key remote PCB? I am not sure wether that PCB cloned can copy the program from IC.
16 views

### What is the structure of a Server Key Exchange Message structure when using a psk identity hint?

I need to know the structure of a server key exchange message when using a psk identity hint. I know the general structure but I can't find an example of where the identity hint fits in. Thanks.
28 views

### How to test digital signatures between two computers? [on hold]

I have to test a digital signature algorithm. I have two computers, one will be signer and the other one is verifier. I implemented both of these in C++ but I do not know how to test it. Computers are ...
30 views

### Is order of Correlation Immunity of AES S_box Zero?

I am working on AES S_box and trying to find out its properties like Correlation Immunity, Balancedness , Algebraic Degree , ANF form etc. These Papers 1, 2 give a nice definitions to above said ...
21 views

### where is ANS X9.31 used?

FIPS 186-4 mentions two standards for RSA: PKCS #1 and ANS X9.31. PKCS #1 is used with SSH, X.509, etc. What is ANS X9.31 used with? FIPS 186-4 has the following line: ANS X9.31, Digital ...
80 views

### Proof that a encrypted file has the same content as an (existing) original

Assume that Alice has a file F which she is going to send, in encrypted form, to Bob. Alice possesses F and the public encryption key K of Bob in form of an X509-certificate. She generates the file E ...
8 views

### Camellia Key Schedule Sigmas [migrated]

Camellia uses 6 sigmas in its key schedule with values ...
51 views

### Are there any digital signatures valid for multiple pieces of data?

Are there any digital signature algorithms that can be used to produce signatures valid for multiple pieces of data? For example: Pick a private key $k_{private}$, which has public key $k_{public}$. ...
38 views

### Does there exist an indistinguishability formal proof obfuscator?

A formal proof obfuscator is a mapping $\mathcal{O}$ such that whenever $P$ is a formal proof of a theorem $T$, then $\mathcal{O}(P)$ is a distribution of formal proofs of the same theorem $T$. An ...
58 views

### Do the Syllae algorithm and Malaysian cipher from Rubicon exist?

In the first episode of a tv series Rubicon (exactly in 482 and 491 lines of an English subtitles) there is mentioned “Syllae algorithm” and “Malaysian cipher”. I could not find any details about ...
26 views

### Problem when programming Schnorr signature [on hold]

I have some questions about Schnorr signature implementation. I am trying to implement it in C++. I chose private signing key x and public verification key y = g^x. I have a message M, random number ...
15 views

### How are keys stored in a .keystore file or in a .jks file? [migrated]

I would like to know what is the structure of the keys stored inside a .keystore or a .jks file? by structure I mean are the keys stored in key value pairs? how are the passwords for several keys ...
24 views

### How can I convert an image into a long hexadecimal code and vice-versa? [on hold]

Title. Characters to fill required 30 characters minimum.
91 views

### Public key decryption mathematical analogy

To clarify, I'm talking about digital-signatures, not public key encryption. When I encrypt something with a private key, then it should be decryptable with a public key, as I've understood how ...
164 views
+50

### Applying machine learning algorithms to homomorphic encrypted data

I have a basic understanding of encryption and I got back to the topic because of an interesting site that encrypts financial data using homomorphic encryption (HE) and I would be happy for any input ...
48 views

### what are the kind of mathematical proofs that i need to be familiarized with to understand (or do) cryptography? [on hold]

I know reductions are highly used to show that encryption schemes are secure under certain conditions, but i don´t know what other math proofs are needed. PD: English is not my native language so ...
31 views

### Using master password to encrypt and decrypt user credentials

I need a way to store third party credentials, and I want to avoid storing passwords in plain text. I can't use a hash because I will need to be able to get the raw password to log in to the third ...
39 views

### How would low-precision Gaussian sampling impact the security of BLISS?

For digital signature, I implemented BLISS in my cryptographic suite, and wrote the Gaussian sampler based on Lattice Signatures and Bimodal Gaussians. But unlike the reference implementation and ...
10 views

### ocf-linux, Splitting large buffers into chunks < MAX_DATA_LEN [migrated]

I am using ocf-linux in an openwrt application and have run into OCF CRYPTO_MAX_DATA_LEN (64K-1) and E2BIG errors in CRYPTO_AES_CBC mode. As a consequence, I need to split the input buffer into ...
92 views

### Is there a PRNG algorithm that allows to switch between states directly, not calling next()?

Basically I need a function with the following interface: getRandomBytes(uint128 seed, uint64 state, uint16 byteCount) Consecutive calls with the same seed and ...
117 views

### Is it ever safe to use encryption with compression?

In the wake of compression-based side-channel attacks like CRIME and BREACH, are there any safe ways to combine compression and encryption? The JWE Specification was finalised almost 2 years after ...
19 views

### Is there any functional encryption scheme whose key generation circuit is in NC1?

To my best of knowledge, I have kown there exists randomized encoding scheme whose encoding circuit is in $NC^1$, fully homomorphic encryption scheme whose decryption circuit is in $NC^1$, and ...
Assume we have an algorithm which asks random oracle $\mathcal{O}$ $Q$ queries $u_1, \ldots, u_Q$. All queries are unique, $u_i \neq u_j$ for $i \neq j$. Queries $u_i$ are random variables, too. What ...