1,073 reputation
614
bio website
location
age
visits member for 2 years, 8 months
seen 37 secs ago

May
25
answered Journals to read in order to keep up to date with interesting research
May
22
comment Security assessment between $g^{a_ix_i+r_i}$ and $g^{x_i+r_i}$
there is a relaxed security definition and the attacker is allowed to reveal the sum but not the individual values. There is no all-or-nothing definition...
May
21
accepted Security assessment between $g^{a_ix_i+r_i}$ and $g^{x_i+r_i}$
May
21
answered Which concrete applications benefit from Oblivious RAM constructions?
May
21
comment Security assessment between $g^{a_ix_i+r_i}$ and $g^{x_i+r_i}$
The adversary doesn't know $x_i$
May
21
comment Security assessment between $g^{a_ix_i+r_i}$ and $g^{x_i+r_i}$
Nice question. $r_i$ is 'partially' secret. It is used to verify aggregate results. $g^{\sum{r_i}}$ is revealed
May
21
asked Security assessment between $g^{a_ix_i+r_i}$ and $g^{x_i+r_i}$
May
20
answered Is it possible to find data which makes sense when decrypted with different keys?
Apr
22
revised Key construction in the Full Cramer-Shoup cryptosystem
typo in the title
Apr
22
suggested suggested edit on Key construction in the Full Cramer-Shoup cryptosystem
Apr
16
comment Existence of a map $\phi:\mathbb{Z}_{N^2}^* \mapsto \mathbb{F} $
@poncho. the multiplicative one: $\phi(ab)=\phi (a)\phi (b)$
Apr
16
comment Existence of a map $\phi:\mathbb{Z}_{N^2}^* \mapsto \mathbb{F} $
@fgrieu But from the isomorphism of the crt?
Apr
16
comment Existence of a map $\phi:\mathbb{Z}_{N^2}^* \mapsto \mathbb{F} $
If we assume finite fields defined over congruent classes of prime numbers then $|\mathbb{Z}_F|=F-1$ The order of $\mathbb{Z}_{N^2}^*$ is $N\phi(N)$. Maybe there is sth with the crt and the isomorphism $\phi: \mathbb{Z}_{N^2}^* \mapsto \mathbb{Z}_{p^2}^* \times \mathbb{Z}_{q^2}^*$ but $\mathbb{Z}_{p^2}^*$ and $\mathbb{Z}_{q^2}^*$ are not defined modulo a prime
Apr
16
asked Existence of a map $\phi:\mathbb{Z}_{N^2}^* \mapsto \mathbb{F} $
Apr
4
revised What are alternatives to number theory based crypto?
added 3 characters in body
Apr
4
answered What are alternatives to number theory based crypto?
Mar
25
awarded  Popular Question
Mar
18
comment Are there hash algorithms with variable length output?
@D.W. But is this secure?In the sense that there are only 360 possible values that can be brute forced easily
Mar
18
comment Are there hash algorithms with variable length output?
So what if i want a hash output that would range from $[0,360]$?If it was an integer then this is totally insecure as we need roughly 9bits. But can we extend the output from 9 bits to 160 by assuming that the integer part would always be 9 bits and then the other 151bits would be used for precision? And i do not care of hashing the same input to the same output.So it resembles that i am in need of a variable out pseudorandom generator
Feb
22
comment Can I safely replace XOR with ADD in a stream cipher?
So the only objective for the choice of the bitwise operation in a stream cipher is efficieny?Could we use birwise AND/OR as well?