Reputation
2,383
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
8 25
Newest
 Talkative
Impact
~39k people reached

Apr
3
comment Check if a number is Carmichael number efficiently
Eh... Arguably this is in scope, because checking for Carmichael numbers is important in key generation for schemes involving large primes, which is most of them.
Apr
3
answered A block cipher whose key changes after each block
Apr
2
comment Are there any crypography schemes which rely on Graph Isomorphism not being in P?
Interestingly, though, graph non-isomorphism is a standard example of an interactive zero-knowledge proof for a language not in NP. If GI collapses to P, I think GNI goes with it, so we'll need a new example in our crypto textbooks.
Apr
2
comment Are there any crypography schemes which rely on Graph Isomorphism not being in P?
Nope, not that I know of. GI is not a great problem from which to build primitives, because it's been known for several decades that many (most) classes of graphs have a poly-time algorithm for deciding isomorphism.
Mar
31
comment A confusion on the proof of Yao's theorem (Yao 82)
Why does it matter? We fix a specific $n$ in the problem statement, and it holds for all $n$, and in fact the distinguishers are usually considered to be non-uniform Turing machines anyway so we can change the description of the program to make absolute values unnecessary for any $n$.
Mar
31
answered A confusion on the proof of Yao's theorem (Yao 82)
Mar
31
comment How to calculate plaintext from modpower cipher
@poncho sigh yes, technically that's true, but if factoring is NP-complete NP=coNP and the whole bloody polynomial hierarchy collapses, which means it's pretty unlikely that factoring is NP-complete.
Mar
30
comment What is a purpose of reducing lattice basis?
That fact along with some explanation of how/why would be a good answer to this question. If you edit I'll change my downvote to an upvote.
Mar
30
comment What is a purpose of reducing lattice basis?
Also, having a short basis allows you to recover a solution to $\gamma$-CVP by using Babai's nearest plane algorithm: cims.nyu.edu/~regev/teaching/lattices_fall_2004/ln/cvp.pdf
Mar
30
comment What is a purpose of reducing lattice basis?
This doesn't really answer the question. The OP was not asking about coding theory, and the point about cryptography is more or less a restatement of the question.
Mar
30
comment What is a purpose of reducing lattice basis?
crypto.stackexchange.com/questions/18425/…
Mar
18
comment Simple application of verifiable random function?
How can a VRF be used to construct a NIZK?
Mar
18
asked Simple application of verifiable random function?
Mar
16
comment Open source implementations of Symmetric Searchable Encryption and Order Preserving Encryption
I got a pretty firm no after several rounds of argument with the C-suites. Sorry for the confusion and for misleading people.
Mar
15
comment “Prime conspiracy”'s effect on cryptography
None. Zero. Zilch. The current season of The Bachelor has a better chance of affecting RSA encryption than this result.
Mar
13
comment Why do we need Euler's totient function $\varphi(N)$ in RSA?
Do you understand how $e$ and $d$ are generated in RSA key generation, and what relationship they need to satisfy?
Mar
13
comment How do I attack an RSA setup where e is even?
Can't you use Coppersmith's attack on 'stereotyped' messages here? Look at section 4.4 on the short-pad attack: crypto.stanford.edu/~dabo/papers/RSA-survey.pdf
Mar
5
revised Provable security of cryptographic hash functions
Fixed fucked-up formatting.
Feb
27
reviewed Approve AES CTR with similar IVs and same key
Feb
24
comment Gaussian function in lattices
This isn't my area, but if I had to guess it's because the $\frac{1}{s^n}$ is a scaling factor that doesn't affect sampling from the distribution?