Unanswered Questions
5
votes
0answers
104 views
Is there any known malleability of scrypt outputs?
The scenario is single-use passphrase-based non-interactive message authentication.
The obvious try to do this is to chose a random salt of the appropriate length and send:
concat(workfactor, salt, ...
4
votes
1answer
58 views
Finding the LFSR and connection polynomial for binary sequence.
I have written a C implementation of the Berlekamp-Massey algorithm to work on finite fields of size any prime. It works on most input, except for the following binary GF(2) sequence:
$0110010101101$ ...
4
votes
0answers
78 views
Common Modulus Attack in a Lucas Group
I'm trying to decrypt a message that is encrypted using a LUC encryption scheme and running into roadblocks. I know that with RSA if Alice and Bob use the same public modulus but different encryption ...
4
votes
1answer
140 views
How do process calculi, CSP, Promela, … compare?
In protocol analysis, formal verification is a very important tool.
What are the major differences between CSP,Promela,... and their pro's and con's for what specific usage cases? What do you think ...
4
votes
0answers
64 views
Which blind signature schemes exist, and how do they compare?
I'm looking into blind signature schemes for use as digital cash. I have come across blinded RSA, and Lucre(DH based). Are there other schemes available, and how do they compare? I suspect there ...
4
votes
0answers
115 views
RSA-OAEP Input Parameters
When creating padding for RSA using OAEP, a message is prepared as follows:
Hash(Input Parameter) || Zeros || 1 || Message
My question is, what should the Input Parameter be? It must be known to ...
3
votes
1answer
93 views
What are the methods to construct a primitive binary nonlinear feedback shift register (NLFSR)?
Given a binary shift register of $n$ bits, a primitive binary nonlinear feedback shift register will generate a sequence with a period of $2^n - 1$.
While I am unable to find a paper which directly ...
3
votes
0answers
51 views
Biclique Attack Information
I have a question about Biclique attack...
The abstract claims:
The first key recovery attack on the full AES-128 with computational complexity $2^{126.1}$.
What does $2^{126.1}$ mean in this ...
3
votes
0answers
101 views
Elliptic curve cryptography related key attacks
This question is an extension of Families of public/private keys in elliptic curve cryptography
As described above, bitcoin "type 2" deterministic wallets use a root private/public key pair, where ...
3
votes
0answers
46 views
Are there any Implementations of Secure Indexes?
there are several papers about Secure Indexes, for Example "Searchable Symmetric Encryption:
Improved Definitions and Efficient Constructions" and "Secure Indexes".
I'm trying to build a system, ...
2
votes
1answer
55 views
DGK Cryptosystem Encryption Speedup
Following @poncho's nice clarification of the RSA speedup here, let's see if I'm able to do the same in the case of the DGK cryptosystem:
We have pk = (n, g, h, u), sk = (p, q, $v_p$, $v_q$) which ...
2
votes
1answer
64 views
Verilog simulation & synthesis of Diffie-Hellman key exchange
Is there any freely available verilog implementaion of Diffie-Hellman key exchange?
I couldn't find anything using google. So, assuming its not there I started implementing on my own.
The code is ...
2
votes
0answers
45 views
RSA reencryption scheme
Is there such an algorithm that would allow to upgrade the encryption of a RSA-encrypted message without revealing the plaintext to the untrusted user?
Basically, such an algorithm would probably be ...
2
votes
0answers
43 views
Elgamal test vectors
I know that Elgamal algorithms have fallen out of fashion, and they are not included in any widespread cryptographic standard nowadays. However, they are still present in several popular crypto ...
2
votes
0answers
89 views
Does the Biclique attack on AES pose a credible risk to its security?
I have heard a lot about the biclique cryptanalysis research on AES, which as far as I know is the closest anyone has got to breaking AES.
Exactly how close did they get? Does this attack propose a ...
