Reputation
1,422
Top tag
Next privilege 1,500 Rep.
Approve tag wiki edits
Badges
1 8 21
Newest
 Promoter
Impact
~65k people reached

22h
comment One-time-pad with multiplication
@poncho indistinguishability
1d
comment One-time-pad with multiplication
@tylo But this does not affect security
1d
comment One-time-pad with multiplication
Assuming that data are bivectors i encrypt by scaling them with a random factor such that cosine similarity is preserved. I treat the random scaling factor as PRG on a seed. There is no decryption
1d
comment One-time-pad with multiplication
I do not need decryption only encryption. @fgrieu why it leaks some information about the plaintext and XOR does not
1d
asked One-time-pad with multiplication
May
21
comment Given $g^a, g^b, g^c, g^{1/b}$, is it hard to distinguish $e(g, g)^{abc}$ from a random value?
@cygnusv report link does not work
May
12
comment Possible to check if $a \in \mathrm{QR}_n$?
@DrLecter But since the adversary knows that $Jacobi(a)=1$ it means that there exists for sure $y$ such that $y^2=x \mod n$. So adversary can decide whethera has QR since it known that $a \in \{\mathbb{J}=1\}$
May
11
awarded  Promoter
May
5
comment How to calculate if probability is negligible or not
It's weird that the sum of one nn and on n probability is nn while for this for the product does not hold.
May
5
comment security proof in pairing based cryptography
@FlorianBourse even if there is a correlation in $C_x-C_i$, still you have to recover D
May
5
comment security proof in pairing based cryptography
It is more than straightforward i think following the reductionist approach
May
5
answered security proof in pairing based cryptography
May
5
comment security proof in pairing based cryptography
what is $C_x$? Of course if you know $C_x$.What is known to the attacker?What is public and secret?
Apr
27
comment Paillier cryptosystem preserve ordering of sums for two integer sequences
@Alexandros The great about Paillier cryptosystem is the fact that users can encrypt with different randomness under the same public key that will decrypt to the correct plaintext under the single decryption key because $r^{N\lambda}=1 , \forall r \in \mathbb{Z}_{N^*}$
Apr
23
revised what is number of invertible matrix m*m on$ z_n$?
Bad notation and syntax
Apr
16
revised What is a Key Derivation Function?
added 82 characters in body
Apr
16
revised What is a Key Derivation Function?
added 82 characters in body
Apr
16
answered What is a Key Derivation Function?
Apr
8
comment Altering the message space of Paillier
@FlorianBourse this can be done by any homomorphic scheme since they are not supposed to be CCA secure. Meaning, the adversary can alter on its will the ciphertext
Apr
8
accepted Altering the message space of Paillier