# All Questions

38 views

### MD5 hash different between sources - different hash for the same string [closed]

I've implemented the md5 source from a crypt lib from http://sourceforge.net/projects/libcrypt/ The string I'm passing to md5 is ...
14 views

### JS libraries or tutorials that utilize deep learning like Netflix [closed]

I am looking for JS libraries or tutorials that have implemented a deep learning approach, to make predictions. The best example is Netflix who predicts what you like based on your past seen movies. ...
37 views

### Can a one-way accumulator be used in place of a digital signature?

Could a one-way accumulator be used in a manner to replace a digital signature? Can it provide a way to: verify that the data has not been tampered with, and verify that the message is in fact ...
69 views

### Simplest way for strong cryptography in chat

I am a beginner in cryptography and I am interested for several weeks on this for my chat application. Basically, it is a centralized model. All messages are stored and potentially visible by ...
34 views

### Signing integers and UUIDs and restoring them from a third party server without tampering

I'm educating myself about cryptography. I know this is a long one, but please, bear with me. :) Now I have a scenario in my mind and I'd like to ask if what I've thought is sound (enough), what more ...
70 views

### Is there a way to optimize a linear scan while preserving anonymity?

I've been wrestling with a problem, and I was hoping if someone else had a bright idea. Here's the problem: I have two sides, Alice and Bob. Alice has a single high entropy string $A$, and Bob has a ...
51 views

### What about using only XOR gates in homomorphic encryption?

What if we were substitute the ANDs with XORs in some homomorphic encryption scheme like BGV(https://eprint.iacr.org/2011/277.pdf), LTV ( https://eprint.iacr.org/2013/094.pdf) ? It may be more ...
43 views

### Rebound cryptanalysis on hash function

I have read The Rebound Attack: Cryptanalysis of Reduced Whirlpool and Grøstl by Florian Mendel, Christian Rechberger, Martin Schläffer, and Søren S. Thomsen, but I didn't understand it and I need ...
247 views

### Do Weak Elliptic Curves Exist?

I'm running into very contradictory opinions when try to understand if weak elliptic curves exist. I'm not interested in the case when a curve's weakness is attributed to properties of an EC's prime, ...
182 views

### How is bitslicing faster?

I have read a paper on Bit Slicing and Lightweight crypto but cannot understand how bitslicing makes encryption scheme faster. Please can someone explain with an example exactly how bit slicing makes ...
24 views

### How to use this homNAND gate?

I was reading this paper https://eprint.iacr.org/2014/816.pdf "Bootstratpping in less than one second" but I didn't understand it throughly. What's the point to build a cheap NAND gate ? Maybe to ...
28 views

### How to toggle a bit homomorphically ?

Suppose I want to use LTV scheme from this paper https://eprint.iacr.org/2013/094.pdf to compute homomorphically a function. But the multiplication operation is more expensive than the additive one. ...
16 views

### Decode with known PSK in DTLS [migrated]

I have a wireshark capture of implementations of DTLS protocol.I have the PSK and I have converted it to corresponding hex.DTLS uses TLS_PSK_WITH_AES_128_CCM_8 ...
354 views

### Pseudo random generator vs block encryption, which is faster?

If one wishes to encrypt one can either use a pseudo random generator to generate a long sequence and then xor it with plaintext, similarly he can use the seed as key to encrypt the plaintext using ...
35 views

### Discrete logarithms: large prime modulus vs. large semi prime modulus

I have a cryptography homework question, in the question it says a cryptographic hash function in the form of $f(x) = g^x \bmod n$ , where $n$ is a very large prime (1024bits and more), $g$ is a ...
78 views

### Why is “semantically secure” important for cryptosystems?

The first question: what is the exact definition of semantically secure? Basically, a cryptosystem is semantically secure if given the public key and the ciphertext, an adversary cannot learn any ...
18 views

### Initializing PGP keys by one side

I am using a PGP method to encrypt and decrypt messages shared between users A and B. Upon the start of a message exchange is the initialization of the public and secret keys by both Users. Lets say ...
90 views

### Difference between oracle behavior and real execution

Suppose that there is a place in a security proof where the behavior of an oracle differs from the corresponding real execution (for example, the decryption oracle rejects certain types of ciphertexts ...
102 views

### Coin flipping with limited communication between participants

Alice and Bob want to play a coin flipping game. Alice wins if the coin flips head. They choose to trust a independent third party that generates a random beacon (such as NIST). There is no ...
48 views

### How do we solve Shammir 2,3 sharring scheme where arithmetic is modulo?

I am trying to get secret S and I have 3 values (2,2)(6,3)(4,9) and know that modulo is 13. I tried using Lagrange basis polynomial and got 8 but I am not sure if that is right and also I cannot find ...
92 views

### Are EC public/private keys significantly weakened by having a known byte?

I would like to use different EC keys for different purposes in an app, and I would like to easily see the purpose for which particular key (pair) was generated. With ~65K attempts, I can generate a ...
130 views

### Block Cipher Without Key Schedule?

I'm designing a cryptography assignment for a college security course, and one of the problems is to perform a simple meet-in-the-middle attack on a 2-round, 2-key cipher. Since we want this to be a ...
41 views

### Multiplication in elliptical curve cryptography

I'm practising for a cryptography test and came across this question: Let us assume that for a specific elliptic curve the formulas for the computation of $(x_3, y_3)=R+S$ are given by: ...
47 views

### Unknown authenticated encryption mode

I'm running through a protocol specification (LoRaWAN, pdf), and I'm puzzled by the crypto. The data is encrypted and authenticated in the following way: a unique 128-bit key is used; the plaintext ...
72 views

### Pseudorandom Functions with different input and output lengths

I am working on a problem found in my Cryptography textbook that goes as follows: Let F be a pseudorandom function such that for $k \in \{0,1\}^n$, function $F_k$ maps $l_{in}(n)$-inputs to ...
59 views

### How to key an HMAC with keys from separate mutually untrusted parties?

The problem is as follows: There are two parties, both of whom would like to HMAC a message with a key. Although the keys are known to one another, both parties do not trust that the other one ...
53 views

### Proving that a node is the only child

Say I have a graph of messages like this: A | B / \ C D By including the parent hash in the message to be hashed I can show that B is a child of A, ...
42 views

### Symmetric encryption with compression for MySQL DB data

I would like to compress data before encrypting and storing it in a MySQL DB to reduce especially bandwith requirements (compression reduces bandwith by 70-80%). At present, all is handled by a ...
55 views

### Having doubt in Rijndael Algorithm- coding for decryption

I am doing a project on the Rijndael Algorithm. I have already written the encryption code which produces the correct output. Now I want to implement decryption as well. I'm doing using VHDL, ...
61 views

### Find plaintext from two ciphers encrypted with a one-time pad and the same key

I'm studying for a cryptography test and I came across this question: Assume a language has three letters: A=1111, B=0011 and C=1010. Two words in this language are encrypted with a one-time pad ...
72 views

### How were semagrams encrypted in the pre-digital era?

Historically messages in languages that use alphabets have been encrypted manually according to some kind of algorithm (e.g. mono- and poly-alphabetic ciphers). But how wew messages encrypted in a ...
33 views

### signing key using RSA private key

i want to know can i use my RSA private key for signing the data so receipt can use my RSA public key for verify? if yes, can someone guide me how to execute this program in java.
39 views

### equation of mixcolumn in the aes field

$c(y) = (03)y^3 + (01) y^2 + (01) y + (02)$ Let $d = (01)b$ in the AES field $GF(2^8)$. Provide exact equations for the bits $d_i, 0 \leq i \leq 7$, in terms of the bits $b_i$ of b. Can ...
83 views

### Double randomised HMAC verification to prevent timing attack

A way to prevent timing attacks for hash string comparison is to perform additional HMAC signing in order to randomize the verification process (see Double HMAC Verification). In addition to the ...
28 views

### How to calculate Enc(-m) from Enc(m) in Paillier cryptosystem?

The encryption in Paillier cryptosystem is like this according to Wikipedia: Let $m$ be a message to be encrypted where $m \in \mathbb{Z}_n$ Select random $r$ where $r \in \mathbb{Z}_n^*$ Compute ...
219 views

### I read ECB is bad because the same plaintext outputs the same ciphertext. Isn't that a requirement of a cipher?

In the Wikipedia article on Block Ciphers, it says about the Electronic Code Block mode: The disadvantage of this method is that identical plaintext blocks are encrypted into identical ...
655 views

### Would it be better to split a file and then encrypt, or vice versa?

Assuming that you're paranoid before storing your file (distributed across a shared location), which will be the best case scenario: splitting the file first and then encrypting or encrypting first ...
40 views

### All the affine points on the curve

I have calculated the affine points on the curve $x^2 + y^2 = 1 − 3x^2y^2$ over the field ${\mathbb{Z}}_{11}.$ Using $y^2 = \frac{1-x^2}{1+3x^2}$ I got the following points: ...
27 views

### How implement inverse MixColumn (AES) [duplicate]

I'm stuck in this operation. I could do the mixcolumn whit the help of this. Now, I need to do the inverse but I can't understand that step. I found the next algorithm to do it ...
198 views

### Can Grover's Algorithm be combined with a meet-in-the-middle attack?

We all know and love the meet-in-the-middle attack which basically makes double encryption pointless using a time-memory-tradeoff. Now there was recently the recommendation by the NSA to use double ...
199 views

### Signature to prove of ownership of arbitrary sized data

I am familiar with public key signatures, but I was wondering if there is a method to accomplish the following. Suppose I publish a file (say a PDF article) on a peer to peer network. How can I ...
100 views

### Is md5(x)&md5(y&x) secure?

I was wondering if the following hash function f(x) := md5(x) & md5('abc'&x) (with & as concatenation operator) is secure. This schema can be even ...
37 views

### Decryption ciphertexts encrypted with stream cipher with one key

I have 20 ciphertexts encrypted with cipher stream with reusing one key. Link for ciphertexts: 20 ciphertexts. I have a task, i must decrypt this ciphertext: ...
40 views

### What is the most an adversary can do in the context of public key masquerading?

Suppose two parties A and B are using a public-key encryption scheme in order to communicate securely. A and B both have a public/private key pair: $$A: (P_A, S_A), B: (P_B, S_B)$$ and A already ...
33 views

### TPM vs. Trusted Execution Environment

I have read some content on trusted execution environment, and I like to ask exactly how it improves hashing. What I read at Wikipedia’s “Trusted_Execution_Technology” article states: ...PCRs) ...
131 views

### How is “post-quantum security” proven/shown?

Due to growing concerns over the threat of quantum computing to asymmetric cryptography (RSA, ECC, etc), a number of "quantum resistant" replacements have been proposed (SPHINCS, McBits, and many ...
155 views

### One Time Pads and reuse of the decrypted message?

How is it insecure when Alice encrypts a message with a One-Time-Pad to Bob, and Bob then uses the decrypted message from Alice as the next One-Time-Pad? For example: Alice sends Bob a message ...
143 views

### RSA reconstructing private key knowing MSBs

PREMISE: This question is purely theoretical because usually an attacker will not know private exponent d and can't compare it with obtained MSB bytes. Suppose an RSA 1024 bit signature. An attacker ...