2
votes
1answer
85 views

Roots in modulo field

I have a point $(X,Y)$ on an elliptical curve $E(a,b)$ where $a=-3$ and $B$ is a large number that is in hexadecimal from -51BD. To compress this point oficially in a program, we know that every $X$ ...
0
votes
0answers
16 views

Timestamp assignment and meaning

I have an entity A sending a message to another, B. An encrypted message is signed with a timestamp TB, and then the whole thing is signed again with a new key and new timestamp TA. What i'm ...
1
vote
1answer
24 views

Modulo Square Roots [duplicate]

Here's my issue and someone can help me understand it so I can program it correctly. I have a point(X,Y) on an Elliptical Curve E(a,b) where a=-3 and B is a large number that is in hexidecimal from ...
0
votes
1answer
33 views

Retrieve timestamp from TOTP value

TOTP (Time-based One-Time Password) as I understand is an algorithm that uses the current time as a variable along with a shared key to generate a secured token. Wiki page for reference: ...
2
votes
0answers
52 views

Using machine-learning techniques for data-dependent operations in ciphers

From 'Methods of Symmetric Cryptanalysis' by Dmitry Khovratovich, The data-dependent operations are one of the most controversial design concepts. We say that an operation is data-dependent, if it ...
1
vote
1answer
63 views

Arithmetic modulo 1

In the context of lattice-based cryptography, in particular the Learning With Errors (LWE) problem, I see some definitions given in terms of equations modulo 1 (see for example, Appendix A of this ...
1
vote
1answer
64 views

Why is proving “parties' views are simulatable” enough in semi-honest model?

To prove a protocol is secure in semi-honest model, we have to prove: the view of each party, on each possible pair of inputs, can be efficiently simulated based solely on its own input and and ...
1
vote
1answer
67 views

point decompression on a elliptical curve

I'm programming an elliptical curve cryptography system and I'm having difficulty with decompressing points. The following information is from my project specification as to my understanding: Given a ...
0
votes
1answer
50 views

What approach is used here? [closed]

Here is an image hidding some information. I need to discover, what is the hidden text. I tried to interpret this as 27 letter alphabet(with space) in columns, tried this with Ceasar cipher. No ...
0
votes
1answer
46 views

Oblivious transfer variation question

Now I am doing a variation of the oblivious transfer, I have to use 2 people, pebbles, and boxes. I need to find out if who has a larger number between Alice and Bob (variation of Yao's Millionaires' ...
4
votes
3answers
136 views

Will X9.31 remain a secure & acceptable deterministic random generator beyond 2015?

I am actually looking for available crypto libraries including a deterministic random generator for the purpose of a dedicated crypto key generator unit. I have a simple question about the X9.31 based ...
3
votes
0answers
43 views

Soundness of GRC.com Haystack padding concept [migrated]

I was wondering how sound is the concept presented by the Gibson Research Corporation (see below if you do not want to follow the link) about simple passwords (= very easy to remember) with the ...
0
votes
1answer
48 views

What cipher algorithm is this routine using? [closed]

I transfered a code routine from Java to Python: ...
1
vote
0answers
45 views

Existential Forgery on textbook RSA signatures

Can an adversary who haven't seen the message before forge the signature of that message? The adversary has seen $σ_1 = (m_1)^d \bmod N$ and $σ_2 = (m_2)^d \bmod N$ He forges $m' = m_1\cdot m_2$ $σ' ...
1
vote
2answers
58 views

I don't care about replay attacks. What should I do with the nonce in nacl?

My system forwards encrypted and/or signed messages on a gossip network. Replay is part of the design. What should I do with the nonce? I'm tempted to just set it to the same number always. Is this a ...
2
votes
0answers
21 views

How exactly is the output of the XOR step in PBKDF2 used?

I'm attempting to diagram PBKDF2 for a school project and I'm not 100% sure how to represent the XOR step. Specifically, I'm confused as to whether the output of the XOR step is used in subsequent ...
2
votes
2answers
166 views

Is double hashing collision resistant?

Double hashing can surely provide more security than only one layer of hashing but does that necessarily mean it is more collision resistant? This question in a more mathematical form: If $H$ is a ...
1
vote
3answers
97 views

Using the same symmetric key in both directions?

A simple symmetric encryption scheme uses the same key, derived from a password, for both directions of the communication. Is this bad practice, and if so what should be done about it? Is it 'good ...
0
votes
1answer
37 views

Repeating something encrypted and non-encrypted?

If one wants to keep the receiver's name non encrypted, but it also appears in the encrypted message - will it leak information? (other than the receiver's name, of course.) Let's assume a "bad" case ...
0
votes
0answers
28 views

Find LFSR with Berlekamp-Massey algorithm?

in the paper "A Compact Rijndael Hardware Architecture with S-Box Optimization" (http://link.springer.com/chapter/10.1007%2F3-540-45682-1_15) at page 6 figure 3, i think they constructed a LFSR for ...
0
votes
0answers
44 views

Find generator for irreducible polynomial over binary field

I read this tutorial and I have following question. How they assume that generator: g = (0010) is correct for this polynomial and how to choose the best generator from all for the field.
1
vote
1answer
84 views

Creating serial key generator using ECDSA, how to get signature short enough?

I've written some questions in this stackoverflow and got great responses but now I'm trying to wrap it all together. I have for the last couple of weeks been building a serial key generator project ...
0
votes
1answer
94 views

practical use of homomorphic encryption

Are RSA and Elgamal partially homomorphic techniques? which one is better if one want to use it for practical purpose? and is there some FHE technique which can be used practically?
-1
votes
1answer
100 views

Reversing a Psuedo Crytographic Hash [closed]

I'm trying to get a better understanding of cryptographic hashing. Take the example transformation function below, is it possible to reverse this formula to solve/isolate for message[i]? ...
2
votes
1answer
65 views

Does Ed25519 support cryptographic threshold signatures?

This is a loaded question so I'll list the concerns, not all of which need to be satisfied. Does there exist a threshold-signature scheme for Ed25519 that... Does not require a trusted dealer to ...
7
votes
2answers
217 views

Definition of “pepper” in hash functions

I am confused about the notion of "pepper" in the context of storing hashes of users' passwords. Definition 1: A pepper is a secret key Looking around the Internet, for example here or here, a ...
-1
votes
0answers
53 views

CTR or CBC is using hashed plaintext into encrypted block?

I'm working in a custom encryption scheme (simmetric key block cipher) to serve a company. The main goal is security, not portability or speed (although it's really very fast). The algorithm utilizes ...
0
votes
1answer
70 views

SHA1 - SSL/TLS Cipher Suite

SHA-1 is on the way to deprecation, in particular for digital certification (x509). But I can't find ressources about SHA-1 deprecation from SSL/TLS Cipher Suites. Is it implicit, as deprecation ...
0
votes
0answers
30 views

how can I change representation of point to Jacobian coordinates in Edward's Curve

I want to simulate this algorithm but I want to change it's output to Jacobian coordinates. what should I do ? In the other way how can we change extended homogeneous coordinates to Jacobian ...
0
votes
0answers
21 views

How to compare security parameters of different schemes (Sign-Encrypt, Encrypt-Sign, etc)? [duplicate]

How can one compare the security parameters (confidentiality, integrity, non repudiation, etc.) for different schemes (Sign-Encrypt, Encrypt-Sign, Sign-Encrypt-Sign, Encrypt-Sign-Encrypt)? Are there ...
1
vote
1answer
61 views

ECC - ElGamal with Montgomery or Edwards type curves (curve25519, ed25519) - possible?

I know the usual way of using getting shared secrets for encryption with ECC is DH, however, this only works with two keypairs of exactly the same kind, for example two curve25519- or two ...
0
votes
0answers
52 views

Implementing a pseudo random function in practice

Can anyone point me to a C++ crypto library with an implementation of a pseudo random function (PRF)? I don't have much background in crypto theory, but I am in the middle of a graduate course ...
0
votes
1answer
62 views

RSA Cryptosytsem, choosing $e$ [duplicate]

I am using the RSA crytposytem. I have $p$, $q$ and hence $n$ and $\phi$ however I don't understand how to get $e$ such that $gcd(e,\phi)=1$ Many thanks
0
votes
2answers
88 views

suitable programming language for cryptography algorithms [closed]

I know as programming languages C and java , and I know that java is slow so for this reason it is not suitable for cryptography applications espacially low level programming (manipulating bits) , so ...
0
votes
1answer
139 views

Is this problem based on a known hard problem?

Suppose I generated an $n$-dimentional vector $a_{(1)} = [a_1, \dotsc, a_n]$ with integer component (actually I can generate as many $a_{(i)}$ as possible). Now I need to get an vector $b = [b_1, ...
1
vote
1answer
55 views

Requirement for the length of a HMAC tag?

I've seen NIST requirements about key length. What about the output lengths ? Is 112 bits enough for the HMAC output length ? Can we truncate the tag to keep only 112 bits ? Thank you
-2
votes
0answers
41 views

Factoring a number who has factors with same number of digits

I am working on a factoring problem. I have a number that is a product of two prime numbers, both with same numbers of digits (20-30 digits). I was searching online for algorithms that are good for ...
0
votes
1answer
51 views

how to represent message as an integer between $1$ and $n-1$ [closed]

I am trying to implement simple El-Gamal cryptosystem. And I can't understand how to represent message as an integer between $1$ and $n-1$. The only thing that comes to my mind is: if $n$ bit length ...
0
votes
0answers
67 views

Generation of strong primes

It seems that this is pretty difficult to find large (above 1024 bits) strong primes, or at least such primes p where (p-1) has a very large prime factor. Is there any information regarding the ...
2
votes
1answer
104 views

Rounds in cryptography

I need to make it clear I know nothing about crypto so in that context I'm hoping to clear up some confusion: As I understand it a "round" in a cipher is one encryption operation and a cipher like ...
1
vote
3answers
128 views

In cryptographic protocols, what protects against an attacker dropping messages?

In some cryptographic protocols I have seen messages protected for confidentiality, authenticity, replaying attacks, reordering attacks, etc. What protects a protocol from an attacker in a ...
0
votes
0answers
26 views

Encrypt algorithm [duplicate]

Is it possible to encrypt an algorithm? What I mean by this is have a remote/cloud computer execute a program that will process some data... And the remote computer would not be able to know anything ...
1
vote
0answers
57 views

Corporate PKI - SHA1 deprecation [closed]

Here is the context. Suppose you have a corporate PKI with : AC_Root (offline in safe store - SHA1 signature) SubRootA ans SubrootB (offline in safe store - SHA1 signature) SubSubRootC, ...
4
votes
0answers
233 views

RFC 6979 - Why not simply hash the message & the private key for deterministic ECDSA?

Why go through the trouble of using the HMAC_DRBG process, instead of simply hashing [message | private key] to calculate $k$ for deterministic ECDSA? If the ...
0
votes
1answer
36 views

block cipher algorithms with variable block lengths

Rijndael supports block lengths of 128, 192 and 256. AES does not but Rijndael does. What other algorithms support variable block lengths? Or is Rijndael unique in that regard?
0
votes
0answers
24 views

transforming RC2 keys to have effective minimum length in implementations with fixed effective lengths

mcrypt's implementation of RC2 has a fixed effective length of 1024 bits, however, it is possible to simulate keys with effective lengths between 1-1024 by doing something like this: ...
0
votes
1answer
42 views

Does SHA-1 hash have quasi commutative property? [closed]

Although I have tested with a program and found negative answer, I want to be sure.
-1
votes
0answers
39 views

Encryption using elliptic curves

What is currently the best way to actually encrypt a message using elliptic curves? I'm looking for an algorithm like ElGamal, but more efficient, since ElGamal outputs a tuple of two points for every ...
7
votes
1answer
138 views

Why there are limitations on using encryption with keys beyond certain length?

I am writing a java program to encrypt a message using 256-bit AES encryption, but I am getting illegal key size error, I have read that I have to use some JCE ...
-1
votes
1answer
53 views

Issue about randomness : what if random looks “human” ? [closed]

I read a lot of stuffs about entropy/randomness. But what if a random generator (either digits or strings) once output a "human" patern ? I know it is very unlikely to happen, but if a random code ...

15 30 50 per page