# All Questions

71 views

### Timestamping services authorities, utilizing Linked, hybrid and other than PKI schemes

What are well respected Cryptographic Timestamping authorities utilizing more sophisticated than just PKI (RFC 3161) schemes, like Linked, Linked and signed, distributed hash trees (maybe P2P?), ...
148 views

### Is TOTP or a timestamp encryption a better timestamp-based authentication token system?

Are there advantages to using TOTP over encrypting a timestamp with a shared secret, in cases where the readability or ease of typing the token are not important?
170 views

### Proper formatting of symmetric algorithm secret key

Given this description from RFC 4880 sec 5.1: The value "m" in the above formulas is derived from the session key as follows. First, the session key is prefixed with a one-octet algorithm ...
114 views

### Setting protocol parameters to achieve concrete security

Background One issue with modern security proofs is that they are usually asymptotic. In other words, such proofs are usually formulated as follows: For any polynomial-time adversary $\mathcal A$, we ...
120 views

### Security of stream cipher based on Matrix multiplication GF(256) with randomized padding

The actual question is stated at the end of the text. Suppose you have a (grossly inefficient) confidentiality stream cipher with the following components: The keyed function ...
2 views

### Connecting Javascript with Amazon's CloudHSM

Encryption newbie here. We are building a secure bidding system and part of the problem we're trying to solve is ensuring that we never get un-encrypted data in our servers. We would thus like to ...
11 views

### Has NumberFields @ Home benefited cryptography in any meaningful way?

Is there any new understanding, property, or knowledge that came from the Number Fields@home distributed computing project and has advanced the study of cryptography? Is there something specific that ...
38 views

### Pohlig-Hellman exponentiation block cipher

Let $G$ be a group of order $n$ and let $e,d$ be integers such that $ed\equiv 1 \pmod{n}$. Then the exponentiation maps $x \mapsto x^e$ and $y \mapsto y^d$ are inverse maps on $G$. These maps give us ...
46 views

### Is it possible to modify SSL handshakes to enable PFS while still using RSA during the handshake?

I know we could possibly be using DH key exchange, that would enable PFS. However, what if we make modifications on our SSL 3.0 handshake such that the only cipher we use is RSA for the achieving PFS? ...
24 views

### Correlated or biased coin protocols?

There are a number of papers in the literature describing secure/fair coin flipping protocols. Unfortunately in my case, I am looking for coins that are epsilon-biased or epsilon-correlated. I am ...
60 views

### If H(m) = 0 for some m, how can a DSA signature be forged?

If we know for some message $m$ that $H(m) = 0$, how can we forge a DSA signature with only the public key? I got that $g^s*r = (g^x)^r$ where $x$ is the private key, but that's one equation with 2 ...
62 views

### How does Google's “authenticator number generator” work?

I have two-factor authentication enabled on my Google account, and I have this app on my phone which generates a number I have to type when I'm logging in to Google-Mail. But I don't understand how ...
104 views

### Blum-Blum-Shub Cryptosystem

I am given $N$, which is Bob's encryption key. I was able to successfully factor $N$ into $N=p*q$. Alice encrypts a messages for bob and sends $a = [1,1,1,0,0,0,1,0,1,1,0,...]$ $b = 1545164156...$ ...
20 views

### User's Privacy in certificateless cryptography

In practically, while doing registration with Key generation center in certificateless Signature,How can be a user do registration to the Key generation center without providing (Global ...
26 views

### Why have AH and ESP security protocol when we could just encrypt packet with a symmetrical key?

Why have AH and ESP security protocol when we could just encrypt / decrypt packets with a symmetrical key and with some block cipher using that symmetrical key?
33 views

### Can you clarify the proof that secure LR-two party protocols do not exist?

In the paper “Multiparty Computation Secure Against Continual Memory Leakage” on pg. 1237, the footnote #1 discuss why it is not possible to construct a leakage resilient two-party protocol. But I'm ...
17 views

### TCR hash functions from MD5

I'm reading Collision-Resistant Hashing: Towards Making UOWHFs Practical (pag. 10 and 11) and here say The most direct way to construct a TCR hash function is to key a function like MD5 or SHA-1. ...
22 views

### Masking Parity Check Matrix Goppa

I like know: Is possible that any adversary PPT will be able to find the generator matrix $G$ of Goppa code $GC$, if given $SH$ matrix, where $H$ is a parity check matrix of $GC$ and $S$ is a random ...
10 views

### Why does a joint leakage MPC protocol not directly apply to a disjoint leakage requirement?

In this paper on pg. 1239 the footnote at the bottom points out the difference between $joint$ leakage and $disjoint$ leakage. The authors say the weakly leakage resilient protocol of BGG+11 cannot ...
59 views

### Unblind a RSA blinded signature

I have blinded m = 16 with r= 13, e = 7 and n = 209. This resulted in m' = 464, which led to a s' = 8. Now, I want to unblind this s' by using s = s' * r$^{-1}$ but im stuck at filling in the ...
30 views

### Example of CL PKC

I am trying to solve the example of algorithms of Certificateless Signature by manually and solving the mathematics of Algorithms but not succeed while doing mathematical calculations. Please ...
35 views

### Bit commitment with 1-out-of-2 oblivious transfer

I know a protocol for bit commitment using regular OT (Bob has 1/2 chance of learning the bit Alice transferred to him) which goes like this: COMMITMENT PHASE Alice chooses a bit $b$ For ...
26 views

### Is there any way to pass a passphrase seed into GPG?

Instead of using a random seed to generate a private key, I would like to use a long passphrase as the seed. The use case for this would be so if my private key were lost via a hard drive failure, I ...
30 views

### Generating a valid signature on El-Gamal without knowing the private key

Suppose we are given $p$, the large prime, $g$ which is the primitive root for $p$, $b$ which is calculated as $b=g^x$ mod $p$ where $x$ is the private key and $0<x<p-1$. Also suppose we know ...
32 views

### Replacing 8 sBoxes in DES with just 1 sBox, expected result?

Ok, i am trying to modify DES by my own way. There will be just one sBox and it will also contain all values from other 7 sBoxes. How it affects DES in this case? [? more secure/less ...
59 views

### hybrid PKE scheme CCA2 insecurity

I'm reading a paper here say: As we know, in hybrid PKE schemes XOR alone cannot perfectly hide challenge bit to the CCA2 adversary The author does not define hybrid PKE schemes. What is ...
67 views

### OpenPGP Brainwallet

This question is an intersection of two pieces of technology. The first is on Hierarchical Deterministic Wallets from the Bitcoin Space. The second is on OpenPGP key generation. Has anyone created a ...
38 views

### What is the difference between a one-shot MPC protocol and a unbounded invocation of multiple MPC protocols?

In this paper on pg. 1236 under the section "Security Against Continual Leakage" the authors say: We further remark that the weaker security notion previously achieved cannot be extended ...
68 views

### Could MITM securely identify identity?

Consider protocol like QUIC or MinimaLT which are essentially layer4 replacement for TCP/UDP (riding on top of UDP currently because of fear of random firewalls dropping new L4 protocol). From crypto ...
46 views

### Are there public $p$ and $q$ numbers for use in DSA?

There are many RFC documents giving large primes to use in Diffie-Hellman. However, I couldn't find standards on the $p$ and $q$ large primes used in the DSA signature scheme. This is proving to be a ...
42 views

### Decryption or attacking DES encrypted file

I have a file that has been encrypted using DES and am looking to decrypt and find a secret message encoded. All I have is the file which is full of binary data. There is no key or anything else which ...
34 views

### Perfect Forward Secrecy in MTI/A0

Would the property of perfect forward secrecy still be achieved in MTI/A0 for a session key that was established between C and D when one LL-key aD is revealed so that both LL-keys aC and aD are ...
37 views

### Security based on PRF

I've seen that there is several kind of PRFs. Sometimes people speak about strong PRFs. When proofs of a protocol or algorithm are given based on the assumption of the use of a PRF, they speak ...
75 views

### About private keys of certificateless cryptography

While reading Identity Based Cryptography and Certificateless Cryptography , Can any one tell why should private key generator(PKG) or Key generation center (KGC) generate private keys for users..? ...
47 views

### How to Generate rsa keys using specific input numbers in openssl?

I am new to openssl so asking this question here for help. I selected 2 prime numbers p and q. Calculated public pair: (n,e) and private key: d. For ex. ...
106 views

### Certificateless Signature

Consider the following scenario: There are two users: A and B. Users A and B generate a pair of their own public and private keys PUBa, PRIa and PUBb, PRIb. There is one trusted center(TC) that ...
63 views

### How are keys generated in hierarchical, attribute based encryption schemes?

On top there is a trusted authority, then domain authority and users. The trusted authority has public key and master key. The domain authority has one master key and the users have a secret key. On ...
49 views

### Understanding trapdoor test and some of my confusions about it

The trapdoor test says as follows: Let $\mathbb{G}$ be a cyclic group of prime order $q$, generated by $g \in \mathbb{G}$. Suppose $X_1,r,s$ are pairwise independent random variables, such that ...
22 views

### What is the default type of salt for encryptions in Heimdal Kerberos?

I am trying to figure out what the salting mechanisms are for various kinds of encryptions in Heimdal Kerberos. In section "4.11 Encryption types and salting" of the Heimdal Kerberos documentation it ...
32 views

### Partial encryption of a file?

I want to partially encrypt a large block of data using AES. Meaning: given plaintext[0:1100], I would like to encrypt ...
97 views

### PGP encryption options

I recently began using PGP desktop and found several options for my encryption capabilities. Which of these (AES, Cast, Triple DES, TwoFish, IDEA) is the most recent, firstly, secondly may the NSA not ...
66 views

### Is there any restriction in using lossless compression algorithms for huge key sizes?

I'm studying McEliece and Multivariate Public Key cryptographic systems. The main problem here is the huge key size. Is there any restriction in using lossless compression algorithms to fix this ...
48 views

### Use of Different keys with PCBC

Currently I am having a doubt, while making a "DES PCBC" encryption on an image I observe a bit of the silhouette of the image (Probably because of the XOR between plaintext blocks and ciphertext ones ...
88 views

### How many messages needs to be send to server to get AES key in Cache-timing Attack

I'm trying to evaluate the correlation between key length and the number of messages that needs to be send to server during Cache timing Attack. I read both D. Bernstein, “Cache-timing attacks on ...
53 views

### How do multiple parties agree on a target block to hash for?

Bitcoin style blockchain… I have party(node) A, B, C and algorithm X. Algorithm X generates the first half of a target hash input - the "solution" to the problem. I want A, B and C to sign their ...
250 views

### Decrypting a message without the private key using CRT

I am given 5 different encryption modulus, $N$, each ranging from 78 to 88 numbers long. Then for the encryption exponent, each has the same which is 5. Then I am given 5 different encrypted messages, ...
98 views

### High throughput and efficient data encryption/description? (other than AES)

What are some of the high throughput and efficient ciphers? I know AES has generally good performance, but is there anything more efficient that it now? I would like to perform small performance test ...
204 views

### How is the initial permutation of DES created?

I am creating a program in C language with DES (Data Encryption Standard) functionality, but don't know how to apply the initial permutation. Is it achieved by swapping the values? If "yes", then ...