# All Questions

4 views

### How to prove a key generation protocol based on blind RSA signature?

It seems like that a user may use blind RSA signature to obviously generate a key. My design is as follows. Please correct me if I get anything wrong. (Please refer to WiKi https://en.wikipedia.org/...
14 views

### Freely available softwares for simulating/implementing MPC protocols

I have been designing multiparty computation (MPC) protocols for functions that interest me. Although theoretically I am able to deduce the asymptotic complexity of the protocol, I wish to know as to ...
5 views

### how do i incorporate AES encryption into a text encryption hta in the form of a batch file?

i made an hta app and a few batch file encrypters and decrypters used in the hta for encrypting text. how can i incorporate AES encryption into my hta? i would like to have an AES encryption function ...
8 views

### Finding $f^{-1}$ in the YASHE keygen algorithm

In the YASHE (Yet Another Somewhat Homomorphic Encryption) algorithm, the beggining of the key generation step specifies: Sample $\ f',g ← χ_{key}$ and let $\ f = [tf' + 1]_q$. If $\ f$ is ...
166 views

22 views

### Incorrect answers to queries in Waters' IBE proof by Bellare and Ristenpart

In "Simulation without the artificial abort: Simplified proof and improved concrete security for Waters' IBE scheme", Bellare and Ristenpart present a new proof for Waters' IBE scheme that does not ...
38 views

### Secure network protocol that can detect and adapt to attacks?

Is there any secure network protocol that can detect and adapt to attacks? For example: it would detect how hacker hacked it and then it can learn by itself and adjust itself and do encrypted ...
9 views

### how write AES Inverse cipher key of 256 bit in verilog and inv mix column code in verilog .can any one have the verilog code [on hold]

how write AES inverse cipher key of 256 bit in VERILOG and inverse mix column code in VERILOG .can any one have the VERILOG code . can any body provide the VERILOG code
60 views

### Under which conditions would it be OK to use “H(pass||data)”?

I understand that the main motivation for HMAC is extension attacks. If data always has content-length either implicit in the app or even explicitly put into the hash, I get the impression that HMAC ...
75 views

### Encrypting big numbers into small ones?

I'm new to cryptography and I am trying to figure out an equation that convert any big number to a smaller one and another one that reverse the operation to get the same big number again! The problem ...
22 views

### Does the Blowfish cipher work with OFB mode?

I'm trying to implement the Blowfish cipher in Output Feedback mode. OFB mode has two operations, XOR and the block cipher. XOR inputs two blocks of the same length and outputs one block of the ...
37 views

### Is XORing a random stream of bytes a secure way to obscure a file?

Long ago I created a very simple program that used the C library's rand method to generate bytes to XOR with the bytes of a file. This was a reversible (just run it through again) method to make a ...
47 views

### Is anyone using Half-Bit encryption? What is it used for now?

Long ago I learned about an encryption scheme which uses a random mask of bits which were "half on". I don't recall all the details, but basically, if a mask bit was a one, the input bit was passed ...
21 views

### AES/GCM Encrypt or decrypt from both Java and .NET [on hold]

New to encryption... I am trying to match an encrypt/decrypt routine created in Java with a .NET but I am getting a "The computed authentication tag did not match the input authentication tag" error ...
48 views

### Is “6 bit packed ASCII” an effective encoding to obscure text data?

I wrote a routine for a former employer that took the low six bits of ASCII text and "compressed" by cramming the bits together, so that 4 bytes reduced to 3. This had the advantage of automatically ...
53 views

### How can I resolve this basic MAC paradox I’m stumbling upon in my proof?

Suppose $S: K \times M \to T$ is a secure MAC. ($K$ = key space, $M$ = message space, $T = \{0,1\}^n$ = tag space.) $S$ being secure means that no matter what messages $m_1,...,m_q$ we throw at $S$ ...
40 views

### Are there some well-known crypto APIs that leak information?

Are there any well-known crypto APIs or libraries that leak or used to leak information (it can be the key or anything else)?
78 views

### SAT-Based Public Key Cryptosystem

I am researching post quantum cryptography and I've stumbled upon this article which presents a PKC with an np-complete (SAT) trapdoor. I was wondering if someone could help me understand the way the ...
29 views

### Calculating 3DES Key Check Value (KCV)

I am trying to verify a Triple DES Key Component generated by PC Crypto. The key portion is: E6F1081FEA4C402CC192B65DE367EC3E and the KCV value that should be ...
89 views

### Is this an effective obfuscation technique?

Long ago I created a simple program which obfuscated a file by taking the first byte, then XORing it with the second, taking the (original) 2nd byte and X-ORing with the 3rd, etc, down the line. The ...
58 views

### Order-Preserving Encryption (OPE) and leakage

I recently came across OPE and Order-Revealing Encryption (ORE), but I didn't exactly got the idea why they are important. What's exactly important about them? Are they actually used in practice? My ...
103 views

### Can a hash have more than one input?

From a definition stand point, can a hashing algorithm have more than one input, ex: $H(m_1, m_2, m_3)$? If not why are algorithms like bcrypt, scrypt and pbkdf2 referred to as password hashing ...
3k views

### Can Shannon's entropy be used to determine if a file is encrypted?

If we have to determine a file is encrypted or not, can we use Shannon's entropy algorithm on the file? As discussed here, the entropy (in bits per byte) being closer to 0 is considered as more ...
60 views

### How to meter and limit number of files encrypted?

First my apologies if this isn't the right forum for this but here's my problem : I have a black box that takes an input file and produces an output file. I want to sell this black box to a customer ...
38 views

### In which situation is HMAC mandatory rather than signature? [duplicate]

I’ve seen that the question has been asked already but this is still confusing to me. In a digital signature, Alice sends a message M and the ...
24 views

### HSM RNG - Compliance to FIPS 186-2

If the RNG of a HSM is said to be compliant to FIPS 140-2 (approved DRBG - SP 800-90 CTR mode) does also imply that it is compliant to FIPS 186-2 ?
17 views

### Homomorphic encryption implementation over circuits or assembly code [on hold]

I've looked at a few implementation of homomorphic encryption, such as HElib, but they only consider additions/multiplications and such. Is anyone aware of any implementation of homomorphic ...
9 views

### Entropy of Hash function [duplicate]

How is the entropy of the output of hash functions are defined? More specifically I saw in the paper https://eprint.iacr.org/2013/383.pdf Table 3 page 24. The entropy of challenge is mentioned which ...
32 views

### Proof for collision resistance on a block-based hash

I am designing an unkeyed hash based on the SIMON cipher. This is a follow up to “this” question. A quick summary: I have an ECC engine and the SIMON cipher in hardware, and it’s in an extremely ...
46 views

### Encoding an element in $r=r'||h(r')$ way

We consider a finite field $\mathbb{F}_p$, where $p$ is a large prime e.g. 256-bit. We have $b$ a fixed element of the field. We encode it as $b'=b||h(b)$, where $h(.)$ is a cryptographic hash ...
42 views

### How to tell if an audio stream is encrypted or corrupted? [on hold]

Is the following stream encrypted or corrupted? I was on a call and then this happened: http://vocaroo.com/i/s0PlF2s8ULAU
35 views

### How we compute distance after lshashing? [on hold]

If we use an lsh function under l2 distance (hw,b(x)= ⌊ (wTx)/r ⌋ where w is a d-dimensional vector with entries chosen independently from a 2-stable distribution, r is a positive real number) or ...
23 views

### Proof that two signatures are done with the same short bases

My question is regarding lattice based signatures. Each lattice can have multiple short (secret) bases. Is it possible to proof in zero knowledge that two signatures on a fixed lattice have been ...
19 views

### What is the exact algorithm and functions of the 4 way handshake?

I have to make a detailed diagram of the 4 way handshake and formulas for its functions so I need to know the exact process behind it. Like precisely what functions are used in it? I have been trying ...
193 views

### How should I read these three-dimensional (pseudo)random-generated numbers representations?

Visiting this site: http://lcamtuf.coredump.cx/oldtcp/tcpseq.html#phase I found graphical representations of random-generated sequence numbers, but I can't figure out how to interprete the plots. ...