# All Questions

5k views

### OTP from Sony BIOS password recover

From Dogbert's blog: Sony has a line of laptops ("Vaio") which compete mainly in the high value market segments. They implemented a master password bypass which is rather sane in comparison to the ...
127 views

### Real life systems that use concepts of crypto computing [on hold]

Are there any working cloud/internet solutions/products that operates on encrypted data such as systems using homomorphic encryption, secure multiparty computation, electronic voting, private ...
60 views

### what are multi-primes and how are they different from semiprimes?

I came to know of semiprimes recently. The simplest explanation of semiprimes is you take any two prime numbers and you multiply them, say 3*11 = 33 in which case 33 would be a semiprime. The numbers ...
63 views

### Is salt bring more security for digital signature! [on hold]

Is it good idea to use salt in digital signature? Is it bring more security? If so, I should use it for key or the message?
27 views

### Real life RSA/El Gamal examples

Can someone direct me to examples of El Gamal and RSA that would be similar to real life (i.e. large primes). I wrote a code for encryption and decryption, but I wanted to test it against some larger ...
321 views

### Is it possible to match encrypted documents using user-defined search terms?

Suppose I am storing a number of encrypted documents in a database. I would like to make it possible to identify the subset of documents whose contents match user-specified search terms without a) ...
34 views

### ElGamal signatures' secret key

Assume I recovered the ElGamal signatures (75,18) and (75,67) Alice produced on the messages 81 and 14, respectively. Alice's public key is (alpha,beta,p)=(2,35,101). How can I recover Alice secret ...
150 views

### How can two UProve token holders prove to a 3rd party that they aren't the same user?

Suppose I have two users who are issued two different UProve IDs. The Issuer has guaranteed that one UProve token bearer will never have more than one UProve token ID. How can I use UProve to ...
43 views

### Research Path For Searchable Encryption [on hold]

Can anyone give me a list of basic cryptographic primitives and concepts I should know to take up a doctoral research in Searchable Encryption?(If it is impossible to list out, can somebody give links ...
78 views

### Less known hash functions producing 128 bit hash

Good day. While reversing a malware I stumbled upon a function producing 16 byte hash. I tried to determine which one is that by checking every function from wiki. Nothing fits. So, there are two ...
69 views

### Private Information Retrieval--Is it still theoretical?

Are there any real world products in which private information retrieval techniques are used?(a data hosting server oblivious of which data item was fetched from it?)If not what are the major barriers ...
56 views

### Building a pad for OTP on-the-fly with Diffie-Hellman

Through repeated DH attempts, could Alice and Bob build a large random key for use as a one-time pad? My intuition is that this protocol would be as hard as breaking DH (discrete logarithm).
71 views

### Decrypt with only the cipher file and the key? [on hold]

I got an encrypted file, and I got the key. The only thing I don't know is "how it has been encrypted". The cipher file is "data" type (not readable by a text editor), but the key is a "text". Do ...
22 views

### El gamal correctness

I tried to find online for the correctness of El-Gamal, but I couldn't find any good resource that will teach me how to show the correctness of El-Gamal, could any body show me how is it done?
579 views

### How can one sign with NTRU?

I am looking at implementing NTRU, but I noticed that while the encryption/decryption algorithm seems to be mature and well-documented, there is comparatively little information about how to sign ...
72 views

### Inverse of a function $f_k(x) := f (x ⊕ k) ⊕ k$

$f : \{0, 1\}^4 → \{0, 1\}^4$ Given a function $f_k(x) := f (x ⊕ k) ⊕ k$, what is the inverse function $f_k^{-1}$? I could not figure out how this would be done. Thanks.
41 views

### Efficient proof of knowledge using Wegman-Carter hash

A verifier wants to ensure, with only little exchange of data with other systems, that a large block of data $M$ that the verifier holds is also available to some other system(s). It is not an ...
32 views

### Feistel network output if round function is the identity function [on hold]

I v been trying to solve this question from the book Introduction to cryptography but fail to find an answer, can someone please explain to me. Thanks What is the output of an r-round Feistel ...
86 views

### Large file validation on an embedded system through hash and encryption

As a preface, I have to say that I am a noob in this area. Having said that, I will ask the question. I have a situation where I need to validate and protect against tampering a handful of large ...
68 views

### PHP secure random number generator [on hold]

I was trying to find a better way to generate random numbers in PHP and thought that using /dev/urandom would be the way to go (based on a few lectures). So I thought I would implement the following, ...
132 views

### Blind Signatures

The verification algorithm given in blind signature. Should it work for both Original message and the signature on it Blinded message and the signature on it. If yes, then how can we verify if ...
55 views

### What is the difference between IND-CCA2 and NM-CCA2? And how does one imply another?

Is there any proof that shows the equivalence of these two?
149 views

### Zero-knowledge proof of a product

I have non-negative integers $x,y,z$. I'm going to give you commitments $C(x),C(y),C(z)$ to them. Then, I would like to prove in zero knowledge that $xy=z$. I can choose the commitment scheme to ...
112 views

### Compact digital signature for noisy data

The question asks for a signature scheme, with a public verification procedure, that is tolerant to minor alterations of the signed data during its transmission [possibly in analog form over some ...
24 views

### ECDSA algorithm using PBC library [on hold]

I am doing a project on Identity Based Cryptography.I am doing coding using PBC library. I have a problem in verifying signature .i am using ECDSA algorithm.. can u tell me why signature does not ...
33 views

### Mifare Classic and crypto1 algorithm

Mifare's Crypto1 algorithm uses a 48-bit LFSR. What does the 48-bit LFSR do exactly ?
24 views

### A rudimentary challenge–response authentication based on dot products in $\mathrm{GF}(2)^k$

We are building a rudimentary challenge–response authentication protocol based on dot products in $\mathrm{GF}(2)^k$. Assume a user has a password $\mathbf{p} \in \mathrm{GF}(2)^k$. When logging in, ...
110 views

### DHE key exchange. Is it really secure?

Context I recently came across a video on the net showing the process of key exchange in Diffie Hellmann. Alice and Bob want to communicate. Eve is the (wo)man in the middle. This video is the ...
22 views

### Recipient ID asked whie using Symmetric encryption with GnuPG [migrated]

I'm trying to encrypt a file using AES algo and sign it using my private key in GPG. The command I'm using is gpg --encrypt --symmetric --cipher-algo aes256 --armor --sign input-file It asks me for ...
118 views

76 views

### Python. RSA common modulus attack problem

I have: N = /*500 decimal numbers*/ E1 = 3740453 E2 = 4226171 M^E1 = /*500 decimal numbers*/ M^E2 = /*500 decimal numbers*/ I must use RSA common modulus ...
4k views

### Types of Cryptography for a 4-8 bit microcontroller

This is more of a research question. I was wondering what types of crypto algorithms would work best on a small 4-8 bit micro controller. I recently read a paper called Security Considerations for ...
38 views

### Recover a secret message in a .wav file [on hold]

First, I apologize for my english, I'll do my best. On my computer, I got a .wav audio file that hides a secret message. I want to recover that message. But I'm stuck and I need your help :). My ...
34 views

### How does hash function in Elgamal signature scheme prevent existential forgery attack?

I have heard that hashing the message M prevents an existential forgery attack. I was wondering how.
113 views

### Verbatim of early work on public-key cryptography?

In late 1997, the history of public-key cryptography was turned around with the announcement by the CESG (April 2000 archive) that public-key cryptography was theorized in a 1970 note [1] by James ...
15 views

### Change of axis positions in Vigenere Square

Is there any history of codes in which there have been changes in the normal axis positions of the Vigenere Square? Have been working on a code which has two non-normal positions -- one with the ...
345 views

### Why we can't implement AES 512 key size?

Out of curiosity why we can't implement AES 512 key size? Please explain somehow i can understand! I'm not an expert.
89 views

### Hash collision using the leading 40-bits of SHA-1

I am trying to implement Floyd's cycle finding algorithm for finding a leading 40-bit hash collision in the SHA-1 algorithm. However, my code will not find a repetition even with 800,000,000 hashes. ...