11
votes
2answers
96 views

Practical differences between circuits and turing machines for cryptography

In formal cryptography, we model algorithms (mostly our adversaries) as (Probabilistic) Turing Machines or as boolean circuits. In our lecture on formal cryptography, we learned that circuits are more ...
4
votes
0answers
72 views

Is correlation in vector distributions “dangerous”?

Consider the two vector distributions $\xi,\chi$ described below, each one outputting integer vectors of length $n$ with coefficients in $\{0,\dots,n\}$. Distribution $\xi$ samples each coefficient ...
5
votes
1answer
108 views

Key size for HMAC-SHA256 [duplicate]

After reading a bunch of past stack exchange posts like this one and RFCs 5869, 2104, and 4868 I felt comfortable that a 32-byte key was sufficient for HMAC-SHA256. However, I am implementing my code ...
3
votes
0answers
37 views

EC Schnorr signature: multiple standard?

I 'm working on some EC-Schnorr signature code. Reading various papers on that, it's seems EC-Schnorr is not standardized as well as ECDSA. For example, I found two main differences in two main ...
1
vote
1answer
44 views

Tackling encryption problems with “Zipf's law”?

I am new to cryptography and was wondering if it would be possible to semi-reliably "decrypt" an encrypted message by using the statistical distribution of symbols (/letters/numbers) in the encrypted ...
-1
votes
0answers
25 views

Denial of service using Merkel tree proof

If suppose client and server using Merkel tree and some how Server got compromised, what he can do is always send wrong proof therefore denial of service. Is it as simple?
0
votes
1answer
154 views

In RSA. Why is $\phi(n)$ kept secret and $n$ is public?

I mean, $n$ can also be easily used to find the factors $p$ and $q$ right?
0
votes
1answer
59 views

Give a simple hash chain example in Java [closed]

I am looking for a very simple example of cryptography hash chain source code. Could you forward me some examples or link, guys? For example, https://en.wikipedia.org/wiki/Hash_chain [1]. ...
0
votes
0answers
25 views

Using a straight password for encryption and authentication

Assume we have a password like 3buNCh_7kaRmencrEst3. Now suppose we have two parties who know this password. We a have communication scheme that uses the password ...
2
votes
1answer
43 views

Why are the bit lengths of keys and digests equal in Lamport signatures?

In Lamport's one time signature scheme: One way function to convert a pseudo random number private key to a public key takes $\{0,1\}^n$ and returns $\{0,1\}^n$. Cryptographic hash function to ...
6
votes
1answer
221 views

Authentication by hardcoding public key in client software

It would seem to me that mobile applications could reduce network traffic by hardcoding the server's public key into the app. The idea being that they could then encipher a secret to share with the ...
3
votes
1answer
101 views

Is there any function that does not suffers birthday problem?

I am eager to know that if there is any function that does not suffer birthday problem and how to prove it formally that the function is not suffering the birthday problem.
0
votes
0answers
26 views

MAC is constructed by hashing and then encrypting

Suppose the MAC is constructed by hashing and then encrypting, that is $MAC(m, k2)=E_{k2}(H(m))$ where H is a public hash function. There can be several alternatives in how the transmitted message is ...
3
votes
0answers
24 views

About BGV Scheme Batching Technique

I am reading BGV12 about BGV homomorphic scheme right now.But I am being stuck to understand Batching technique in this paper. In Pack function (page 32),this paper feeds ciphertext $c_i$ and sk ...
0
votes
0answers
10 views

Using Openssl Libarary to convert .key encoded to .pem [migrated]

So i created a c program that takes in an encrypted (encrypted.key) file and a public key to decrypt the private encrypted encrypted.key. However, my program only works when taking in two files that ...
3
votes
0answers
56 views

When to chose hardware accelerated crypto for Big Data

if you were to recommend a cipher/mode configuration that emphasizes performance for your customers, would you recommend a hardware based accelerated solution over one that isn't? For big data at ...
5
votes
3answers
135 views

Searchable Encryption with Substring Search

I want to search substrings in encrypted string. To do that I have read “Implement Rabin-Karp Algorithm” and “Substring-Searchable Symmetric Encryption”. After that, I completed the Rabin-Karp ...
3
votes
1answer
127 views

Why only one secret value with Shamir's secret sharing? [duplicate]

Shamir's Secret Sharing works by sharing data points on a curve, whereby when you have the required number of data points, you can find the function of the curve and find out the secret, which is ...
0
votes
0answers
14 views

Testing the first 40 bit sequence for A5/1 if all registers initialized to 1

I have an assignment where my instructor asked to generate the first 40 bits for an A5/1 algorithm if all registers are initialized to '1' initially . I have implemented the algorithm successfully ...
3
votes
1answer
71 views

What are the time considerations with regard to security against birthday attack?

When designing security for a physical safe, one of the critical specifications is how long will the safe resist attack, this tells you how quickly you must detect and respond to an attack on the ...
1
vote
0answers
54 views

Does using a verifiable secret sharing scheme ensure robustness of a protocol if it is secure under the semi-honest adversarial model

Consider a protocol $\pi$ which uses a linear secret sharing scheme like that of Shamir secret sharing. Further assume that the protocol $\pi$ has been proven to be secure (correctness and privacy) ...
-3
votes
1answer
93 views

RSA when n= 2360221 and encryption = 5 find decryption key d, when M =1234 [closed]

when n= 2360221 and encryption = 5 find decryption key d,and Cipher text C when M =1234
2
votes
1answer
77 views

How to detect what crypto-method is used by Filecoder.Q?

I have 2 different images, one original, and one locked by a malware detected by eset as "Win32/Filecoder.Q". How to detect the encryption method that is used and the key, that is not using any ...
3
votes
1answer
127 views

Trying to understand textbook exercise question regrading RSA

I am preparing for the final exam in my Data Security class so I am trying to read and understand the textbook's exercise questions. Any hint would be great. Question (Exercise 9.14 of textbook): ...
0
votes
1answer
37 views

Synchronous Stream Cipher Problem

Hello I am facing a problem trying to solve this question in the picture. Does anyone know how to produce the mentioned 32-bits of the key stream? The plaintext in this case is ...
1
vote
1answer
50 views

Trying to udnerstand textbook sample solution

I am preparing for the final exam in my Data Security class so I am trying to read and understand the textbook's exercise questions. The sample solution at the end the textbook is more like a hint ...
0
votes
1answer
45 views

Are collision-resistant hash functions even possible? [see description] [duplicate]

Surely there can be no real collision resistant Hash function since hash values are of finite size which means there are finitely many of them, but there are an infinite number of messages we could ...
1
vote
1answer
62 views

what is meaning of operator “ := ” in cryptography?

I've seen := used in several cryptography papers where the this symbol has been used instead of assignment operator ($ \leftarrow $ ) or equal sign (=), but never with an accompanying explanation. ...
0
votes
0answers
48 views

signature, hashing schemes

I have 20 friends. we create message(s) (1...i) and tar them up with a file messages.hashes(1..i). We sign these tars with our ...
0
votes
0answers
9 views

SAM module in Payment transactions & cryptogram key storing

As you know because of low security factors,General MCU's are not appropriate choice for storing Transaction or cryptograms keys.Therefor embedded systems developers used SAM modules for secure ...
0
votes
0answers
38 views

Find SHA256(secret||data) using SHA256(secret) and data

I need to find the SHA256 hash of s string like this: "part1-part2". I know the SHA256(part1), length of part1 and I know part2, but I don't know what is the contents of part1. Is there any chance I ...
3
votes
1answer
44 views

About ORAM initalization and running out of space

I have two questions about ORAM Since at the beginning,the server allocates unused storage for ORAM cient,there are no user's data in the storage.if now client access the storage the server will ...
1
vote
2answers
44 views

Key management and derivation - Allow changing of the passphrase

I'm working on a program, which allows encrypting files before storing it on a cloud service. Currently I'm trying to figure out how to derive and store the keys. First, I wanted to use a simple ...
2
votes
1answer
39 views

What implementation properties of a hash function prevent safe truncation? [duplicate]

Truncating a hash function's output should, in theory, not increase the likelihood of a collision more than you would expect based on the truncated output size. This makes sense when thinking about ...
1
vote
1answer
67 views

SHA256(RsaPrivateKey) == AES key?

I have an RSA private key (more specifically, an SSH key in Putty format, 4096bit) and want to use its SHA256 hash as an AES256 key, instead of using an independent newly generated AES key. Are ...
0
votes
0answers
26 views

What is transaction capacity of a POS using 3DES DUKPT?

I am looking for the transaction capacity of a Point-Of-Sale device using 3DES DUKPT. Once all keys derived from the future key set are exhausted (1M or 500K?), how will the POS be reloaded with a new ...
0
votes
1answer
38 views

Why hash function are used in digital signatures? [duplicate]

In the lectures I see, hash functions are always used when we want to sign a document $d$. My question is why they are used in digital signatures? Maybe, because it is more easy and fast to calculate ...
2
votes
1answer
29 views

Can multi-prime RSA be used to create an abuse-resistant lawful interception mechanism?

New to site so this may have been asked before: Can multi-prime RSA, i.e. where N is product of three or more distinct primes, be used for secure communication while allowing distinct authoritative ...
3
votes
0answers
35 views

Benchmarks for second round CAESAR competitors

I'm interested in how the second round CAESAR competitors stack up in terms of software performance against each other and against chacha20-poly1305 with both small and large messages. Sadly the only ...
1
vote
1answer
39 views

Attacks on schemes based on elliptic curves when the transmitted points are not on the curve

Some elliptic curve schemes require to send a curve point during the normal execution of the protocol. For example, ElGamal encryption and ElGamal signature require this. On the other hand, ECDSA does ...
2
votes
0answers
22 views

Creating an SPN cipher from ChaCha20 or Salsa20's double round function

Given that ChaCha20's building blocks have been also used to construct a hash function, can the double round function from either ChaCha20 or Salsa20 be used to construct a secure SP-network cipher? ...
1
vote
0answers
28 views

Some confusions about Repeated Doubling Algorithm?

The following repeated point doubling algorithm is taken from the book Guide to Elliptic Curve Cryptography by D. Hankerson, A. Menezes, and S. Vanstone on page#93. Clearly, this algorithm is ...
2
votes
1answer
27 views

Steps to encrypt endorsements to a petition

I plan to circulate a petition, asking people to support it. This petition will reach a senior government official. In regular circumstances, people would support such petitions by writing their ...
0
votes
1answer
69 views

How secure is this logarithmic encryption algorithm?

How secure would the following logarithmic encryption algorithm be when tested under the same conditions as high end encryption algorithms (AES, RSA etc...). Note: For smaller text the text will be ...
4
votes
1answer
82 views

How to prove that an integer is hard to factorize when sampled from a known distribution

Suppose that an $n$-bit integer $c$ has been randomly drawn from a distribution $\chi$, whose description is known. Is there a general method to check if this particular sampling helps factorize $n$? ...
2
votes
1answer
37 views

On the security definition of password-authenticated key exchange

I found in all PAKE papers, the security is defined as something like this: Let $Succ(A)$ be the probability that an attacker $A$ successfully distinguished the session key from a random string. Then ...
1
vote
1answer
28 views

Crypto lib that use files instead of passphrase

I would like to program an application to allow people to encrypt files without using a password or pass-phrase but an arbitrary long file. I'm searching for a library that allows me to safely create ...
3
votes
1answer
80 views

what is the difference between proofs and arguments of knowledge?

What is the difference between proofs and arguments of knowledge in the context of zero-knowledge? I have read this sentence in this ePrint: It is useful to distinguish between zero-knowledge ...
1
vote
2answers
47 views

Using what we already know about the data to decrypt it?

Are there any methods or tools out there that let us use what we know about the data in order to crack the encryption? For example let's say I get access to an encrypted database file but I know ...
6
votes
1answer
104 views

What does the TLS 1.2 client finished message contain?

I am implementing TLS 1.2 and I'm stuck on the client finished message. My question is: what is the size and structure of a clients finished message in TLS 1.2 when using the ...

15 30 50 per page