0
votes
0answers
43 views

RSA algorithm in this doesnt (ever) give right decryption [duplicate]

Lets consider p=47 q=57 msg=3 n=p*q=2679 ф(n)=2576 now e=11, and inverse of e is 1171 modulo ф(n) y=msg^e=333(mod n) ///Encryption y^d=1131(mod n) ///Decryption but this is not original message ...
0
votes
0answers
60 views

compression with codebook and Cryptography

a question about the difference between code book based compression method and key based cryptography. As I know Crypto != Compression. The Shannon said Crypto is try to reduce the information of ...
0
votes
0answers
103 views

Python implementation of a blind signature scheme which doesn't involve RSA

RSA seems a bit creepy after the Snowden revelations and i'm looking for a simple python based blind signature library to fiddle around with. So far i've been unable to find anything. What am i ...
0
votes
0answers
54 views

Decrypt a message which is encrypted using XOR? [duplicate]

This is a puzzle asked in a contest. Given that encryption , decryption happens as per following rule/code: ...
0
votes
0answers
23 views

Kryptos K2 keyword derivation [duplicate]

So I've been doing some reading on Kryptos, and to be honest the keyword for K2, ABSCISSA, has a pretty weak derivation. (The method using the eee's). Isn't there a better way to come to that? I dont ...
0
votes
1answer
66 views

Non-repudiation and digital signature of a dishonest participant

Let's assume a dishonest Alice who sends, encrypts & digital signs a message to Bob. Bob stores the decrypted message and the digital signature in a database. However Alice is a bad girl and ...
0
votes
0answers
25 views

Reducing key shares in Damgård-Dupont threshold RSA

I'm working on understanding and implementing Damgård, I., & Dupont, K. (2005). Efficient Threshold RSA Signatures with General Moduli and No Extra Assumptions. Public Key Cryptography-PKC ...
0
votes
0answers
27 views

Proving the complement property of DES? [duplicate]

I'm trying to show that for a given plaintext (P), key (K), and cipher (C) in the DES algorithm: ...
0
votes
0answers
51 views

Problem in understanding Blakley's Secret Sharing Scheme

I need to implement Blakley's Secret Sharing Scheme. I have read below mentioned two research papers but still unable to understand how to implement it. Safeguarding cryptographic keys Two Matrices ...
0
votes
0answers
44 views

Is signing a message just encrypting it with private key? [duplicate]

I have a simple question, When I sign a message (in RSA) does the program encrypt the text with my private key? Because I can decrypt it with my public key. Yes or no. Is signing a message just ...
0
votes
1answer
34 views

Cipher for human interpretation [duplicate]

Please suggest algorithms to encrypt and decrypt text messages that can be easily performed by human in a considerably short time. It doesn't have to be really secure, but sufficient to fool ...
0
votes
1answer
62 views

Converting a number to a member of a multiplicative cyclic group

I am currently trying to make an implementation of the ElGamal encryption for educational purposes. As I understand it, when using the encryption with multiplicative cyclic groups, one generates a ...
0
votes
0answers
21 views

Data anonymization and search with wild-cards

Broadcast encryption technique proposed by Water et al. http://www.slideserve.com/nairi/revocation-systems-with-very-small-private-keys takes a leap from earlier schemes as it provides smaller user ...
0
votes
0answers
71 views

chameleon signature vs regular signatures

I am trying to understand the practical usage of sanitizable signatures particularly on Chameleon Hashing and Signatures. Chameleon hash, or trapdoor function allow parties with the knowledge of the ...
0
votes
1answer
128 views

Is RC4 +XOR secure for small data?

I need to encrypt transmission between my device (with AVR processor) and base. I create packet data - it will be encrypted into string: ...
0
votes
1answer
38 views

Hiding and Binding key in Groth-Sahai NIZK proof system

In context of Groth-Sahai NIZK proof system, I have a couple of doubts on Hiding and Binding keys. In case of hiding keys (highlighted in red), how is it ensured that $\tau(A) \subseteq \langle ...
0
votes
0answers
122 views

Two questions on EMSA-PKCS1-v1_5

If I implement EMSA-PKCS1-v1_5 in the following two non-standard ways, what kind of things could go wrong? The padding structure will be referred as (00|01|PS|00|DER(Digest Algo)|Digest), where | is ...
0
votes
0answers
40 views

Problems in the results of NIST PNRG suite

I am a beginner in the field of cryptography.I have problems interpreting the NIST (sts-2.1.2) suite results. After running the statistics with 100 samples (each sample of 1000000 byte length) a new ...
0
votes
0answers
84 views

Is ASCON cipher broken?

http://eprint.iacr.org/2015/030 present several attacks of ASCON but does not have a conclusion section. I'm having troubles estimating what are the consequences on the use of ASCON. What's your ...
0
votes
0answers
89 views

How does multi platform encrypted cloud storage work?

I'm really interested in end-to-end encrypted cloud storage and couldn't find out how following scenario could work: A user of a cloud provider which provides zero-knowledge-authentication (like for ...
0
votes
0answers
252 views

Public key encryption and big files with NaCL

I am trying to encrypt big files using NaCL (actually PyNaCL) - see http://nacl.cr.yp.to/box.html After reading some docs, I came up with this prototype : Bob wants to send a big file to Sarah. They ...
0
votes
1answer
69 views

PKI Infrastructure

I've got a very simple but for me a difficult question. I analyzed the public key cryptography and understand the process. But I didn't understand why is only the receiver able to decrypt to message. ...
0
votes
0answers
28 views

How to find the factors of the modulus? [duplicate]

In the article "A Method for Obtaining Digital Signatures and Public-Key Cryptosystems", the original RSA article, it is mentioned that Miller has shown that n (the modulus) can be factored using any ...
0
votes
0answers
67 views

Simplifying the zero-knowledge proof example? [duplicate]

There is this http://en.wikipedia.org/wiki/Zero-knowledge_proof#Abstract_example. Now I'm curious about this. Why is it not possible for Victor to stand at the entrance and watch Peggy take one path ...
0
votes
1answer
43 views

Can one deduce the symmetric key size used to encrypt a given a piece of ciphertext?

Assume an attacker captures a piece of ciphertext encrypted with a symmetric key. He knows all the details of the algorithm used to encrypt except for the size of the key used in this case. Can he ...
0
votes
3answers
78 views

private keys for multiple devices [closed]

I have an architecture where: a user can have multiple devices (phones) the server needs to broadcast the payload to all devices through the same channel (basically, all devices listen and receive ...
0
votes
1answer
47 views

Unique assignment of X.509 certificate to each client

I'm trying to implement a short scale electronic voting application in a domain comprised of no more than 100 clients. System administrator is able to create new election instances and each client is ...
0
votes
0answers
71 views

Are there any known inverse hash lookups for the zero string?

Just wondering, are there any known inverse hashes / hash lookups in common hashes (md5, sha1, sha2, etc.) for the zero string hash value? (i.e. bytes 0x00 00 00 00 00 ...) Or more specifically, for ...
0
votes
0answers
155 views

Variant of the Decisional Bilinear Diffie Hellman problem

I am working on a cryptographic scheme and I need to rely on the following problem, which I have nicknamed the "Hybrid Decisional Bilinear Diffie Hellman (hDBDH)" problem: Let $e: \mathbb G_1 ...
0
votes
1answer
112 views

Split 32-bit LFSR into two 16-bit LFSR which xor to same sequence [duplicate]

Today I was thinking about exactly this. Is it possible, for a 32-bit LFSR e.g. ...
0
votes
1answer
81 views

Is adaptive security the same as full security?

This question contains a great answer about adaptive security, but I haven't yet found a proper definition what full security is. Does a stronger security than adaptive security exist or are the two ...
0
votes
0answers
135 views

RSA - Why should we sign hash rather than raw content? [duplicate]

Apart from obvious performance considerations, is there any mathematical or crypto reasons that imply that we sign a hash rather than a raw content ? I read that it was because the hash must fit in ...
0
votes
0answers
30 views

emulating progressive encryption with RC4 / OpenSSL

PHP's OpenSSL bindings do not support progressive encryption by default. ie. if you do ...
0
votes
0answers
119 views

Preventing Quantum Attacks on Cryptography [duplicate]

With the advancement of technology in quantum computing, it's becoming more evident that we need to start thinking about protecting the future integrity of our cryptographic standards. What can we do ...
0
votes
0answers
47 views

Is basic RSA secure? [duplicate]

I'm pretty new to cryptography, had RSA in my math lectures a few years back and decided to try it myself. I've implemented a rather basic version of RSA using a hash from a passphrase to create the ...
0
votes
1answer
111 views

Possible to know who is the owner of a message encrypted with RSA public key

Given the scenario in which I want to send 10 messages either to Stalio or Olio. I encrypt these messages with their respective public keys using textbook RSA, before sending the messages to their ...
0
votes
0answers
85 views

Formal proof of theorem concerning the Random Oracle Model

Reading a book on cryptography by Douglas R. Stinson I've met the following theorem, which is stated without proof (see here). Thereby, $\mathcal{F^{X,Y}}$ denotes the set of all functions from ...
0
votes
0answers
31 views

AFV11 scheme simplification

I tried to implement AFV11 scheme http://eprint.iacr.org/2011/410 and faced with performance issues. In order to reduce this issue I have made some simplifications to the scheme. Does the following ...
0
votes
3answers
171 views

Brute force against computational security

One-time pad is secure under brute force with respect to either of the definitions \begin{align} \Pr[M = m] &= \Pr[M = m | C = c]\\ \Pr[C = c | M = m_0] &= \Pr[C = c | M = m_1] \end{align} ...
0
votes
0answers
42 views

Modifying algebraic secrecy message to use digital certificates

I have the following message: sign((M’, T$_A$, sign((encrypt((encrypt(M, $K_{pbB}$), M’), K), T$_B$), $K_{sB}$)), $K_{sA}$) Sign is used for signature generation. Encrypt is used for ...
0
votes
1answer
63 views

Calculate number of chips to solve bit commitment using hash function

I have a problem that I don't know how to solve Assume that H is a cryptographic hash function with output size 80 bits. Assume that ABC123 is a specifically designed line of hardware chips for ...
0
votes
1answer
67 views

Viability of an “Unconventional” Hashing Scheme?

I am playing around with the following hashing scheme: Start with a domain string (same for all users), Allow every user to mutate it in any way defining their own custom replacement rules, Append ...
0
votes
0answers
40 views

Memory requirement in light weight block ciphers cryptanalysis

If we have a light weight block cipher where the block length is different than the key length. Let's say the block has a length of 64 bits while the key is 80 bits. For an attack to be successful, ...
0
votes
0answers
61 views

How does SafeNet MobilePass calculate the counter for following passwords?

Original Question: How does SafeNet MobilePASS generate passwords? The algorithm to calculate passwords was implemented by the author of the original question here: ...
0
votes
0answers
67 views

request for data to test deterministic ecdsa signature algorithm for secp256k1

I’m implementing the RFC 6979 procedure to compute a message signature. I want to test my program on the secp256k1 elliptic curve. Note the “k” in secp256k1, i.e. the Koblitz curve. If you have the ...
0
votes
0answers
37 views

How to determine which key derivation function used for password?

Suppose an attacker collected a password hash file. After performing rainbow tables/dictionary attacks they choose brute force attacks. So they try guessing as many passwords as they can by running ...
0
votes
0answers
108 views

Generate CA with aes256 passphrase protected DSA key

I want to create my own Certificate Authority with an DSA key. I figured out to create it with: ...
0
votes
1answer
146 views

Base64 with shuffled alphabet

I have a base64 'cipher' text, I know that in clear text is a hidden xml document (I do not know nothing about its structure), but the base64 aplhabet was somehow shuffled. Is there any smart way, how ...
0
votes
0answers
51 views

Recovering a constant salt for MD5 [duplicate]

I have STRING and MD5(STRING+SALT) for any infinitely many STRING's. Is their any way that I can recover the SALT itself? (SALT is constant) I actually know SALT, but this is an intellectual exercise. ...
0
votes
0answers
53 views

PRG variant as a commitment scheme

I would like to use a PRG in order to achieve the commitment properties (i.e. Hiding and Binding), however, if we look at a general PRG we cannot state that it has the Binding property. First I show ...

15 30 50 per page