0
votes
0answers
64 views

Generation of strong primes

It seems that this is pretty difficult to find large (above 1024 bits) strong primes, or at least such primes p where (p-1) has a very large prime factor. Is there any information regarding the ...
2
votes
1answer
160 views

Schnorr Identification protocol sometimes wrong?

I'm implementing the Schnorr Identification protocol as part of a larger protocol. In a large percentage of cases, around 20%, my test fails. I don't think it's a code problem, although possible, but ...
0
votes
0answers
24 views

transforming RC2 keys to have effective minimum length in implementations with fixed effective lengths

mcrypt's implementation of RC2 has a fixed effective length of 1024 bits, however, it is possible to simulate keys with effective lengths between 1-1024 by doing something like this: ...
0
votes
0answers
26 views

Encrypt algorithm [duplicate]

Is it possible to encrypt an algorithm? What I mean by this is have a remote/cloud computer execute a program that will process some data... And the remote computer would not be able to know anything ...
0
votes
1answer
35 views

block cipher algorithms with variable block lengths

Rijndael supports block lengths of 128, 192 and 256. AES does not but Rijndael does. What other algorithms support variable block lengths? Or is Rijndael unique in that regard?
0
votes
0answers
32 views

A rudimentary challenge–response authentication based on dot products in $\mathrm{GF}(2)^k$

We are building a rudimentary challenge–response authentication protocol based on dot products in $\mathrm{GF}(2)^k$. Assume a user has a password $\mathbf{p} \in \mathrm{GF}(2)^k$. When logging in, ...
1
vote
1answer
75 views

In HMQV, can one use multiple identities with one public key?

The HMQV protocol has 2 "identity" fields $\hat{A}, \hat{B}$ that are used in the dual signature - and it tries to guarantee that any properly-generated session key is only shared by a single $(A, B, ...
3
votes
1answer
97 views

PGP String to Key specifiers

I've been reading through the PGP Standard and here I'm a little confused. This section is discussing converting string data to a session key. I'm confused about the paragraph in bold. First off, what ...
0
votes
1answer
42 views

Does SHA-1 hash have quasi commutative property? [closed]

Although I have tested with a program and found negative answer, I want to be sure.
9
votes
7answers
2k views

Where can I begin to study the math behind modern cryptography?

Why do I start the word buffers in MD5 with those values specifically? What in the world motivated the decision to use the numbers 1, 1, 2, 3 for the mix columns stagein AES? And what kind of ...
7
votes
1answer
127 views

Why there are limitations on using encryption with keys beyond certain length?

I am writing a java program to encrypt a message using 256-bit AES encryption, but I am getting illegal key size error, I have read that I have to use some JCE ...
-1
votes
2answers
129 views

Encryption algorithm designed to be easy to decrypt by machine but impractical to decrypt by hand

I am looking for - or considering the design of a new - encryption algorithm that does not use variable keys, such that it is easy for a computer to encrypt and decrypt any message regardless of its ...
-1
votes
0answers
39 views

Encryption using elliptic curves

What is currently the best way to actually encrypt a message using elliptic curves? I'm looking for an algorithm like ElGamal, but more efficient, since ElGamal outputs a tuple of two points for every ...
1
vote
0answers
97 views

Bilinear pairing

I am working on Efficient Construction of Pairings which are being realized by Miller's algorithm. In this algorithm the basic steps are point doubling and line function computation point addition ...
2
votes
2answers
58 views

Is there an alternative AES schedule?

I'm currently reversing an AES implementation for disk encryption. The odd thing I'm stumbled about is a key schedule where the encryption round keys are not the same as the decryption round keys (in ...
-1
votes
1answer
53 views

Issue about randomness : what if random looks “human” ? [closed]

I read a lot of stuffs about entropy/randomness. But what if a random generator (either digits or strings) once output a "human" patern ? I know it is very unlikely to happen, but if a random code ...
1
vote
1answer
50 views

secure embedded/microcontroller crypto using AES-ctr with hmac-sha2

The embedded device is a low-power 8-bit microcontroller (memory usage is constrained to about 10kb code, 1kb ram). As the device is battery-powered and manual service should be minimal, more powerful ...
0
votes
1answer
66 views

Isn't Groth-Sahai proof system applicable beyond Bilinear groups?

Classical paper by Groth-Sahai on NIZK proof system is titled as "Efficient Non-interactive Proof Systems for Bilinear Groups". To my understanding, only (Pairing Product Equation) PPE are defined ...
0
votes
1answer
52 views

How to establish if a string contains a message

If you have a string S, then the string can be composed of four things: cleartext 'random' data encrypted data compressed or otherwise non-encrypted, but modified, cleartext If you want to see if ...
-1
votes
1answer
59 views

Meaning of Multiplicative Group to the power n i.e. Z^n [closed]

What does $Z_q^n$ mean in this notation?      References: on the 2nd paragraph of page: http://en.wikipedia.org/wiki/Learning_with_errors
0
votes
0answers
34 views

Mistakes in Jarecki-Liu use of Camenish-Shoup encryption?

I am implementing a protocol that uses Jarecki-Liu OPRF, which itself uses a simplification of Camenish-Shoup Encryption. Description of the way they do Camenish-Shoup is in section 2.3 of ...
3
votes
1answer
71 views

Minimum number of independent trials needed to detect a bias [closed]

Suppose, I suspect that the probability of occurrence of a particular bit as $0$ is $.558$. Since, it is not $.5$, so this is possibly a bias. Now, my question is: What is the minimum number of ...
0
votes
2answers
85 views

Where to store the file extension to retrieve it correctly after decryption

I am using Java to write AES-256 to encrypt various files with different extension, the problem is, where am I suppose to store the file extension so the if the data is decrypted, the file extension ...
1
vote
3answers
126 views

Maximum length in bits of the product n=pq

If p and q are two 1024-bit prime numbers, would the maximum length in bits of product $n=pq$ be ${1024}^2$ or $2^{1024}$? I think it is ${1048576}={1024}^2$? Also, would the least significant bit ...
2
votes
1answer
48 views

Finding Elliptical curve points and encoding text using them

I recently got into learning Elliptical curve cryptography and are currently building a project in C#. Everything is working well so far, I can encode and decode points, and thanks to this forum I ...
0
votes
3answers
70 views

Repeatedly using same key on different plaintexts

Symmetric encryption: Does using the same key over and over again introduce a vulnerability? Meaning, if I transmit a different piece of plaintext encrypted with the same key every day, will an ...
0
votes
1answer
52 views

Does MD5 hash have quasi commutative property? [duplicate]

I am implementing a one-way accumulator using MD5 hash, wondering wheather it has quasi commutative property or not.
1
vote
1answer
139 views

Generalize the Merkle–Damgård construction for any compression function

I am trying to figure out this question: Generalize the Merkle–Damgård construction for any compression func­tion that compresses by at least one bit . You should refer to a general input ...
1
vote
1answer
176 views

Why is an IV used in Merkle–Damgård transform?

In Merkle–Damgård transform, a fixed vector IV is chosen at the beginning, and it is hashed together with the first block x1. I wonder why we don't use x1 straightforward, i.e. hash x1 and the next ...
1
vote
2answers
129 views

Different padding rules for Merkle–Damgård and Keccak/sponge function

We learned that length padding was used in Merkle–Damgård where after padding with zeros another block is added that contains the initial length of the input. This is supposed to prevent same hash ...
-1
votes
1answer
59 views

Is the Vigenère Cryptosystem malleable? [closed]

Is the Vigenère Cryptosystem malleable, and how can we prove that it is (or it is not) malleable?
0
votes
0answers
6 views

How is security of server's RSA private key is ensured? [migrated]

We repeatedly hear news of hacking of passwords from PW database (server side) but nothing about hacking of server's RSA private key (not asking regarding finding p and q for a given public modulus ...
0
votes
0answers
46 views

RSA OAEP: prevention of partial decryption of ciphertexts

I'm trying to understand RSA encryption (as a beginner in cryptography). go on this wiki page http://en.wikipedia.org/wiki/Optimal_asymmetric_encryption_padding scroll down to the 2 numbered points: ...
1
vote
1answer
42 views

simulating rc4-256 with rc4-128

OpenSSL supports rc4 with 128-bit keys and rc4 with 40-bit keys. It does not support rc4 with 256-bit keys. My question is... is it possible to modify the state of the pseudo-random generation ...
0
votes
1answer
36 views

can you suggest any applicayion for implementing threshold homomorphic encryption cryptosystem(Paillier cryptosystem) [closed]

I want to implement one project in multi party homomorphic encryption using paillier. Can you suggest any application for implementation.
5
votes
2answers
168 views

Secure degree reduction for Shamir's secret sharing

I understand the basic Shamir Secret Sharing protocol, and when two shares are multiplied, the degree of the polynomial increases. I've seen in a number of papers a reference to a degree reduction ...
12
votes
4answers
48k views

How secure is AES-256?

The cipher AES-256 is used among other places in TSL/SSL across the Internet. It's considered among the top ciphers. In theory it's not crackable since the combinations of keys are massive. Although ...
0
votes
0answers
30 views

Email Encryption [migrated]

I'm hoping someone can point me in the right direction. If I wanted to implement email encryption within an organisation what would be the best way? I've been searching the web tonight but all my ...
2
votes
2answers
63 views

Computation indistinguishability questions

The definition I have is: Two probability ensembles $X = \{X_n\}_{n \in \mathbf{N}}$ and $X = \{Y_n\}_{n \in \mathbf{N}}$ are computationally indistinguishable if for every probabilistic ...
0
votes
0answers
37 views

Diceware word list for six dice

I really like Diceware, but it now needs six words to be safe. Instead of adding a word, I would think that increasing the size of the wordlist and adding an extra dice would be a better idea. I have ...
-1
votes
1answer
35 views

CoAP authentication using DTLS

what is the meaning of this notation ?? AES{Yi, (Yi XOR Ki | nonce1)} https://tools.ietf.org/html/draft-bhattacharyya-core-coap-lite-auth-00
1
vote
1answer
78 views

Elliptical curve cryptography key generation time

I am currently trying to learn more about Elliptical curve crypthography and have finally started to get things working and undestanding the different pieces. I've written a small project in C# and ...
1
vote
2answers
68 views

Sharing an encrypted file between a group of people

Is there any way to share an encrypted file with a group? In the other words, can I encrypt a file with a public key so that each person in a group decrypt it with his/her private key? Is there any ...
1
vote
0answers
59 views

Bilinear Map vs Inner Product [migrated]

What is the difference between a Bilinear Map and a Inner Product?
2
votes
1answer
62 views

Gap problem for Learning With Errors

Informally, a "Gap" problem is the one that arises when solving the computational (or search) version using an oracle for the decisional version. For example, the Gap Diffie-Hellman Problem (GDH) is ...
5
votes
2answers
158 views

When would one prefer a proof of knowledge instead of a zero-knowledge proof?

I've just realized I find it hard to distinguish between these two terms (proof of knowledge, and zero-knowledge proof), specially where only the latter seems to be used in many cryptographic ...
-1
votes
1answer
80 views

Cracking plain RSA by factoring the modulus n

This is the setup: I have both public and private keys of one "instance" of RSA. And I have only the public key of another RSA cryptosystem, but this system has the same modulus as the first one. I ...
0
votes
0answers
21 views

Wiring pattern for field multiplier

I am doing a project to implement point multiplication unit in elliptic curve cryptography. Going for a galois field multiplier in normal basis. The point multiplication unit is for higher field size ...
3
votes
2answers
139 views

Real life systems that use concepts of crypto computing [closed]

Are there any working cloud/internet solutions/products that operates on encrypted data such as systems using homomorphic encryption, secure multiparty computation, electronic voting, private ...
2
votes
1answer
66 views

what are multi-primes and how are they different from semiprimes?

I came to know of semiprimes recently. The simplest explanation of semiprimes is you take any two prime numbers and you multiply them, say 3*11 = 33 in which case 33 would be a semiprime. The numbers ...

15 30 50 per page