# All Questions

18 views

### Does it make sense to have multiple values of authentication and cipher offsets while encrypting a packet?

Consider a packet with N segments. cofsset(cipher offset - from where one must cipher) lies in arbitrary Segment "A". aoffset (authentication offset - from where one must authenticate) lies in ...
43 views

### RSA modulus (N) from public key and calculating N from p, q not equal [on hold]

I have a RSA public key in the form of public exponent and modulus as follows: ...
20 views

### EC based password authenticated key exchange protocol

I would like to know: What is the currently best (efficiency and security wise) known EC based password authenticated key exchange protocol? (i.e. is there any EC based protocol may be similar to DH ...
50 views

### Popularity of ECMQV authenticated key agreement protocol

I've got a few ECMQV related questions: Why is ECMQV a more efficient EC-based authenticated key agreement protocol? Why is ECMQV so popular? Is it because no other protocol of its strength exists? ...
52 views

54 views

### Choosing finite field size in Shamir's Secret Sharing Scheme

The Wikipedia article on Shamir's Secret Sharing says to that to have information theoretical security the splitting algorithm should be evaluated using finite field arithmetic on the field ...
40 views

### Errata for NIST SP 800-63

I'm looking through the latest version of NIST SP 800-63, and there is a table (Table A.1) in the Appendix that supposed give the "entropy" of a password for a 94 character alphabet for various ...
254 views

### Weaker alternative to Ed25519?

For me, the main advantages of Ed25519 are that it avoids patents (by computing in one dimension) and that it is fast. However, the 128bit security of Ed25519 is sometimes too strong to comply with ...
72 views

### Benefit of using random key in Shamir's Secret Sharing

I am implementing Shamir's Secret Sharing, and I find that in (t,n)-threshold scheme, the shares are just using 1,2,3...,n as the key to form the shares ...
37 views

### Value of S and r in Fiat-Shamir Protocol

In the book Cryptography and Network Security by Forouzan,in chapter 14, Fiat-Shamir protocol, its mentioned that two large prime numbers p and q are chosen and kept secret. However n=p*q is made ...
53 views

### Standards/RFCs for non-Diffie-Hellman perfect forward secrecy?

Some time has passed since PFS introduction and we now have secure&proven asymmetric ciphers that can generate strong keys very efficiently (elliptic RSA variants and/or QD-Mceliece can generate ...
193 views

### Interpretation of the results of NIST (p)NRG suite

I have problems interpreting the NIST (sts-2.1.2) suite results. After running the statistics with 100 samples (each sample of 1000000 byte length) a new prng i got this result: ...
36 views

### Meaning of Signature hash algorithm field in certificate

I'd like to understand what is the meaning of this field, especially considering that when calling a crypto library to sign data the digest method is specified by the caller. For example, this simple ...
112 views

I'm pretty new to this and find it quite interesting, but my brain won't process how it works so I have to ask some questions :) Why is cryptography used? Is it for extra security once the password ...
62 views

### What are the difference between cryptographic primitives and encryption primitives?

For example, from reading I found that the cryptographic primitives of both AES and DES are Confusion and Diffusion. However the encryption primitive for DES was Substitution and Permutation while ...
80 views

### How does the Blowfish algorithm key initialization work

I'm having some trouble understanding the Blowfish encryption algorithm. From the Wikipedia article... The secret key is then, byte by byte, cycling the key if necessary, XORed with all the ...
41 views

### Rationale of “r” AES key use in OTR version 3 AKE protocol?

I just tried to review & understand AKE (Authenticated Key Exchange) protocol as defined in OTR secure messaging protocol version 3 here , and aiming to achieve Perfect Forward Secrecy I am a ...
83 views

### Decryption using Key and vector. [closed]

Decrypt the enclosed text using not so advanced encryption technique. Key is “abcdefgh” and vector is “abcdefgh”. ÷ó*ÁÛýÁ n9†“Ü,YÓ©?†]žÀ
117 views

### How to decrypt the text using the key and vector? [closed]

Decrypt the enclosed text using not so advanced encryption technique. Key is “abcdefgh” and vector is “abcdefgh”. ÷ó*ÁÛýÁ n9†“Ü,YÓ©?†]žÀ
56 views

### Question about feistel network [closed]

What’s the output of two round Feistel network, 1) when input is 1^32||0^32 (L0 is 32 bit 1, R0 is 32 bit 0)? 2) when input is input is ^064(L0 is 32 bit 0, R0 is 32 bit 0)? This is all I have...I ...
43 views

### Why is plain ElGamal not secure?

Why is plain ElGamal not secure? What is the proof behind it?
37 views

### What’s the output of two round Feistel network [closed]

What’s the output of two round Feistel network, 1) when input is 132||032 (L0 is 32 bit 1, R0 is 32 bit 0)? 2) when input is input is 064(L0 is 32 bit 0, R0 is 32 bit 0)?
87 views

### Encryption in which ciphertext is bigger than plaintext?

Is there an encryption which would produce a ciphertext longer than the plaintext? (please ignore block-chaining IV stuff, which would result in a data being generated from the plaintext). The point ...
88 views

### How does chosen ciphertext attack on Elgamal work?

Can it be proven that attacker can obtain the full message if he knows some plain-ciphertext pairs?