1
vote
1answer
71 views

the decryptNode function for leaf nodes in CP-ABE

can someone please explain to me why decryptNode gives as result e(g,g)^rq(0) for leaf nodes, i don't understand how they went from the sconde step to the third ...
1
vote
1answer
95 views

Exponent operation over element of G

I found a definition of an exponent operation over the element of $\mathbb{G}$ in this paper (page 4): $$ (g^a)^{\% b} = g ^{a \text{ mod } b}$$ I couldn't understand the rest of the paper (Decrypt ...
-1
votes
0answers
39 views

Question about "toy: streamcipher

May I know what method should I use to solve question #3? I totally don’t understand it and I can not find any things about the clocking pattern on the internet. Is it still using LSFR to ...
1
vote
0answers
20 views

TPM specification physical presence requirements

I am looking at TPM Main-Part 1 Design Principles_v1.2_rev116_01032011 and on page 69 of pdf, equivalent to page 57 of the document itself,there is comment on physical presence as follows: "Observe, ...
0
votes
1answer
96 views

How secure is this modified Bazeries Cylinder?

This device is a modification of the Bazeries cylinder, it has two stacks of 5 rotors which each bear two alphabets plus numbers 0-9, one in correct order and one in random order ( 36 characters in ...
0
votes
1answer
29 views

SSL Traffic Inspection

Is the firewall decrypted my session? There is an error "Certificate Not Trusted" (Server Certificate changed to Firewall Cyberoam Certificate). Which public Key I got? Is Main server Public Key or ...
4
votes
1answer
163 views

How to generate a bilinear group of prime order p for key generation

I am trying to implement an IEEE Paper In Cryptography. I read many reference regarding an RSA key generation. But i am confused with above statement. Please someone explain me What it says with ...
0
votes
1answer
59 views

RSA-OAEP: How does it work?

I was looking at this image about OAEP: ..and was wondering what was happening here. We have a data block DB which consists of: ...
2
votes
0answers
34 views

Hiding the identity of a party within the Kerberos authentication scheme

In the Kerberos authentication protocol, as described here: would it be safer to replace step (1) with: $$ A \rightarrow T : A, E_{K_A{_{T}}}(B, N_A) $$ so that a passive adversary does not know ...
3
votes
1answer
122 views

How to enforce data privacy, integrity and authenticity of distributed firmware images for an embedded device?

I'm developing a bootloader for an embedded device, with which it should be possible for customers (i.e. device owners) to update the device's firmware. It is required that: the firmware is ...
2
votes
2answers
175 views

Transforming Gaussian random $[0,1] $ numbers to uniform $[0,255] $

I am not exactly sure if this is for math stackexchange or crypto: A TRNG outputs numbers in $[0,1]$ in a Gaussian distribution. I would like to convert them into uniform random bytes ($[0,255] $) to ...
-4
votes
0answers
12 views

Breaking El Gamal defined over Sn

How can we break EL-GAMAL Encryption defined over Sn the permutation group ? Kindly give the efficient algorithm for it.
0
votes
2answers
43 views

Length of encryption password aes-256-cbc

I'm encrypting a file with sensitive information with cat secret | openssl aes-256-cbc -a -salt > secret.enc I am choosing a random encryption password with ...
0
votes
0answers
54 views

Smart Card choice for PKI implementation

I'm seeking to implement a national digital signature standard on a smart card. I feel like this is a good place to ask if anybody is acquainted with a hardware supplier offering smart cards that ...
3
votes
1answer
55 views

Do you need a HMAC if decryption attempts are severely limited?

I am considering an application where data bandwidth is extremely limited, and considering removing message authentication codes from encrypted transmissions. The encryption method is currently ...
0
votes
0answers
12 views

Two nodes in p2p network exchange data and read data in same time [on hold]

I want to finde paper about exchange data between two nodes in p2p network. They must read each other's data in same time. In example two player a,b play rock scissors paper. A must read b's data ...
1
vote
1answer
43 views

Tackling encryption problems with “Zipf's law”?

I am new to cryptography and was wondering if it would be possible to semi-reliably "decrypt" an encrypted message by using the statistical distribution of symbols (/letters/numbers) in the encrypted ...
-4
votes
0answers
12 views

Autokey Cipher Question [on hold]

you receive the message DQIXFQETXPPZZR Given that the ciphertext has been encrypted using an Autokey cipher with key k in the range 16 to 18, decipher the meassage. Thanks,
0
votes
0answers
18 views

Why does DSA require that a new $k$ be chosen and the algorithm restarted if $s=0$?

DSA is an algorithm used to generate a digital signature, which consists of a pair of values $(r,s)$. The algorithm computes $r$ first and then $s$. However, if we calculate $s=0$, it says to restart ...
1
vote
1answer
32 views

how to prove sequence y uphold golomb's third axiom

given $\{ x_k \}$ is a m-seq of order $n$, we define $\{ y_k \}$ to be a $m$ digits number: $$ y_i=x_ix_{i+1}...x_{i+m-1} $$ for every integer $n \ge m \ge 1$ how can I show that $\{ y_k \}$ upholds ...
1
vote
0answers
31 views

How to use OpenSSL command line utility to encrypt data with encrypted key from public key?

I may not be asking the right question. I am fairly new to data encryption. I am currently being sent encrypted data that's stored as follows: [ [keysize] [key encrypted with public key] [ivsize] ...
5
votes
1answer
90 views

Key size for HMAC-SHA256 [duplicate]

After reading a bunch of past stack exchange posts like this one and RFCs 5869, 2104, and 4868 I felt comfortable that a 32-byte key was sufficient for HMAC-SHA256. However, I am implementing my code ...
3
votes
0answers
29 views

EC Schnorr signature: multiple standard?

I 'm working on some EC-Schnorr signature code. Reading various papers on that, it's seems EC-Schnorr is not standardized as well as ECDSA. For example, I found two main differences in two main ...
1
vote
1answer
2k views

Traditional DES scheme in Unix crypt function

In a security context course, we need to reproduce the old DES hashing scheme in the crypt program, on an old unix system. I am actually reading the crypt page on wikipedia: The traditional ...
-1
votes
0answers
64 views

How to prove that twice the application of a secure PRF stays secure? [on hold]

Problem 4.6*: Let $E: \{0,1\}^k \times \{0,1\}^l \rightarrow \{0,1\}^l$ be a block cipher. The two-fold cascade of $E$ is the blockcipher $E^{(2)}: \{0,1\}^{2k} \times \{0,1\}^l \rightarrow ...
5
votes
3answers
124 views

Searchable Encryption with Substring Search

I want to search substrings in encrypted string. To do that I have read “Implement Rabin-Karp Algorithm” and “Substring-Searchable Symmetric Encryption”. After that, I completed the Rabin-Karp ...
1
vote
3answers
107 views

with RSA encryption, how do I find the md5sum of the private key from the public key?

This is a purely mathematical question on RSA encryption. Having $e$ as the public key exponent and $n$ the modulus of a public key. Can I recover the md5sum of the private key $d$ (inverse of $d$ ...
0
votes
1answer
52 views

Give a simple hash chain example in Java [on hold]

I am looking for a very simple example of cryptography hash chain source code. Could you forward me some examples or link, guys? For example, https://en.wikipedia.org/wiki/Hash_chain [1]. ...
3
votes
2answers
340 views

Why is “multiplying” $g^x$ and $g^y$ not possible?

The computational Diffie-Hellman problem states that for a cyclic group $G$ of order $p$ and a generator $g$, it is hard to find the value $g^{xy}$ given only $g^x$ and $g^y$ (but easy if either $x$ ...
1
vote
0answers
31 views

Why are the bit lengths of keys and digests equal in Lamport signatures?

In Lamport's one time signature scheme: One way function to convert a pseudo random number private key to a public key takes $\{0,1\}^n$ and returns $\{0,1\}^n$. Cryptographic hash function to ...
0
votes
1answer
146 views

In RSA. Why is $\phi(n)$ kept secret and $n$ is public?

I mean, $n$ can also be easily used to find the factors $p$ and $q$ right?
-1
votes
0answers
24 views

Denial of service using Merkel tree proof

If suppose client and server using Merkel tree and some how Server got compromised, what he can do is always send wrong proof therefore denial of service. Is it as simple?
5
votes
1answer
189 views

Authentication by hardcoding public key in client software

It would seem to me that mobile applications could reduce network traffic by hardcoding the server's public key into the app. The idea being that they could then encipher a secret to share with the ...
0
votes
0answers
24 views

Using a straight password for encryption and authentication

Assume we have a password like 3buNCh_7kaRmencrEst3. Now suppose we have two parties who know this password. We a have communication scheme that uses the password ...
0
votes
0answers
23 views

Is there a function that can be used to satisfy collision resistant property in MAC? [on hold]

I am doing a project in cryptography where i need to satisfy collision resistant property in my MAC algorithm, is there any function that can be used in MAC that already satisfies collision resistance ...
3
votes
1answer
76 views

Is there any function that does not suffers birthday problem?

I am eager to know that if there is any function that does not suffer birthday problem and how to prove it formally that the function is not suffering the birthday problem.
3
votes
1answer
32 views

Can one extend the nonce of ChaCha20 by using XORing the extra bits with the key?

Can one extend the ChaCha and Sslsa nonces by XORing the extra nonce bits with the key? Both functions are considered secure against related-key attacks.
0
votes
0answers
24 views

MAC is constructed by hashing and then encrypting

Suppose the MAC is constructed by hashing and then encrypting, that is $MAC(m, k2)=E_{k2}(H(m))$ where H is a public hash function. There can be several alternatives in how the transmitted message is ...
3
votes
0answers
20 views

About BGV Scheme Batching Technique

I am reading BGV12 about BGV homomorphic scheme right now.But I am being stuck to understand Batching technique in this paper. In Pack function (page 32),this paper feeds ciphertext $c_i$ and sk ...
0
votes
0answers
10 views

Using Openssl Libarary to convert .key encoded to .pem [migrated]

So i created a c program that takes in an encrypted (encrypted.key) file and a public key to decrypt the private encrypted encrypted.key. However, my program only works when taking in two files that ...
3
votes
2answers
265 views

PGP String-to-Key specifiers

I've been reading through the PGP Standard and here I'm a little confused. This section is discussing converting string data to a session key. I'm confused about the paragraph in bold. First off, what ...
1
vote
2answers
41 views

Key management and derivation - Allow changing of the passphrase

I'm working on a program, which allows encrypting files before storing it on a cloud service. Currently I'm trying to figure out how to derive and store the keys. First, I wanted to use a simple ...
3
votes
0answers
52 views

When to chose hardware accelerated crypto for Big Data

if you were to recommend a cipher/mode configuration that emphasizes performance for your customers, would you recommend a hardware based accelerated solution over one that isn't? For big data at ...
1
vote
1answer
63 views

Analysis of DGHV Security

I want to know how security of DGHV can be breached using oracle and Binary GCD. As I study this paper : Fully Homomorphic Encryption over the Integers But I am not able to understand Section 4.1: ...
-3
votes
1answer
76 views

RSA when n= 2360221 and encryption = 5 find decryption key d, when M =1234

when n= 2360221 and encryption = 5 find decryption key d,and Cipher text C when M =1234
1
vote
2answers
60 views

Initializing PGP keys by one side

I am using a PGP method to encrypt and decrypt messages shared between users A and B. Upon the start of a message exchange is the initialization of the public and secret keys by both Users. Lets say ...
5
votes
2answers
187 views

Trapdoor and RSA (Schneier)

Disclaimer: I'm new to cryptography. Background: From Applied Cryptography (Bruce Schneier), page 30 of 2nd edition A trapdoor one-way function is a special type of one-way function, one with a ...
-1
votes
0answers
59 views

What are applications of math in cryptology that can be explored by a high-school student? [closed]

I was interested in knowing applications that would be comprehensible to a high school senior with a strong mathematical background
-3
votes
0answers
31 views

Doubling or half of the private key range [closed]

bitcoin private key range n = 1 to FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364140 and p = FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFC2F bitcoin public key x = ...
1
vote
2answers
155 views

Modular Multiplicative Inverse and RSA?

In trying to understand this specific part of the RSA algorithm, I found this online: $$e \cdot d = 1 \pmod{(p-1)\cdot(q-1)}$$ Therefore: $$e \cdot d \cdot d^{-1}= d^{-1} \cdot 1 ...

15 30 50 per page