Reputation
2,132
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
8 25
Newest
 Talkative
Impact
~35k people reached

18h
comment Is the concept of provably secure hash the same as entropy smoothing hash functions?
Just to be clear: No, entropy-smoothing hashes and standard cryptographic hashes are not the same. Shoup is saying that it's probably fine to treat them like they are the same, though.
18h
comment Is the concept of provably secure hash the same as entropy smoothing hash functions?
I'm not 100% sure, but I think the 'entropy smoothing' property is strictly weaker than the standard security guarantees of a cryptographic hash. What I think he's saying is that a standard cryptographic hash is probably entropy-smoothing, but those hashes (e.g. SHA256) don't have formal proofs that they satisfy this property.
Feb
10
comment Gaussian distribution in lattices
If you're lucky Chris Peikert will see this question and write a solid answer. He lurks here and occasionally answers questions.
Feb
10
comment Gaussian distribution in lattices
It's not quite the standard Gaussian distribution from statistics, though they are related. The use of discrete Gaussian sampling goes all the way back to Regev's result from 2005 on learning with errors: cims.nyu.edu/~regev/papers/qcrypto.pdf
Feb
10
comment How to design a deliberately weak PRNG for experimentation?
Can you just use a known-weak RNG like the Mersenne Twister?
Feb
9
comment why OCB over AES for authentication encryption?
Why should anybody use a car instead of just an engine?
Feb
8
comment Is there a standard for hashing a list of strings?
I don't think it does - the string '4john' just becomes '54john'...
Feb
5
reviewed Approve Use precomputed value (ECPoint,int) in Java BouncyCastle
Feb
5
comment OCB(Offset Code Book) authentication encryption
Downvoted because it's not clear what you're asking here.
Feb
5
answered Is this the correct procedure for cycle walking using an FPE?
Feb
3
comment implementation of authenticated encryption algorithms on GPU
What results were achieved?
Feb
3
comment implementation of authenticated encryption algorithms on GPU
"in the term of Cryptography is this plan True or NOT?" What are you asking about, exactly?
Jan
31
comment Is there a standard for hashing a list of strings?
Do you actually need the separator? Can you give me an example of an attack that works without separators that is prevented by using them?
Jan
31
answered Is there a standard for hashing a list of strings?
Jan
30
comment How to calculate plaintext from modpower cipher
Integer factorization is in $NP \cap coNP$, but is not NP-complete.
Jan
30
answered How to calculate plaintext from modpower cipher
Jan
27
comment Can BPS be used to encrypt a single integer, and restrict the output to a certain range?
Why do you think it's only a single integer? Do you understand how BPS works, and what is meant by 'characters' and 'alphabets' in the spec?
Jan
27
comment Can BPS be used to encrypt a single integer, and restrict the output to a certain range?
Your input to the algorithm is a string of "characters" in some alphabet. That alphabet could be binary, in which case your characters will be zeroes and ones. That alphabet could also be base-10, in which case your characters will be decimal digits.
Jan
25
comment Can BPS be used to encrypt a single integer, and restrict the output to a certain range?
You'd specify a regex for a four-digit year not greater than the current year, then pass that as a parameter to the FPE scheme. Internally, it compiles the regex to a state machine, then uses the description of that state machine to create a "ranking table" used during encryption and decryption.
Jan
23
comment How to encrypt a number using AES?
What research have you done? Have you googled the phrase "AES encryption padding"?