meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 6 months |
| seen | 12 hours ago | |
| stats | profile views | 9 |
|
Nov 19 |
comment |
Using CBC with a fixed IV and a random first plaintext block That's why it is a comment and not an answer. Since you are using a source of randomness i can't see why not use it to produce the initial IV. In terms of efficiency this will increase linear the size of the ciphertext compared with the standard way |
|
Nov 19 |
comment |
Using CBC with a fixed IV and a random first plaintext block Why to do that?Is like CTR mode with 1 counting step, but in CTR the IV+the counter are encrypted with AES and this is XORed with the plaintext. If the IV is not random it must be unique, that's why we use a counter |
|
Nov 19 |
comment |
Is it safer to encrypt twice with RSA? @D.W. Is there a quantitative assessment in how large this partial plaintext recovering should be in order to be conjectured as CPA? |
|
Nov 18 |
answered | Relative merits of AES ECB and CBC modes for securing data at rest |
|
Nov 17 |
accepted | Why does OAEP have 2 rounds with 2 random oracles? |
|
Nov 16 |
comment |
Is it safer to encrypt twice with RSA? Does the fact that a tiny amount of information is discovered for the plaintext from the ciphertext violates the IND-CPA security? I am wondering as IND-CPA refers to fully recover the plaintext |
|
Nov 15 |
asked | Why does OAEP have 2 rounds with 2 random oracles? |
|
Nov 15 |
answered | Is it safer to encrypt twice with RSA? |
|
Nov 13 |
comment |
Is Convergent Encryption really secure? @PaŭloEbermann I will try to sum up my answer according to the article. It's a good motivation and exercise for me :) |
|
Nov 11 |
answered | Is Convergent Encryption really secure? |
|
Nov 2 |
awarded | Popular Question |
|
Oct 29 |
accepted | Why pairing based crypto is suitable for some particular cryptographic primitives? |
|
Oct 29 |
accepted | How to plot the distribution of a ciphertext? |
|
Oct 28 |
comment |
Subgroups generators with respect to group generators of composite order @PaŭloEbermann It's not a homework. I was trying to come up with something i was reading in a paper |
|
Oct 28 |
revised |
Subgroups generators with respect to group generators of composite order added 43 characters in body |
|
Oct 28 |
awarded | Critic |
|
Oct 28 |
accepted | Subgroups generators with respect to group generators of composite order |
|
Oct 26 |
revised |
Subgroups generators with respect to group generators of composite order edited title |
|
Oct 26 |
comment |
Why pairing based crypto is suitable for some particular cryptographic primitives? Can you give me an example of a degree-2 combination? I.e given $g^{x_1}, \ldots ,g^{x_n}$ as a consequence of bilinearity i can have $g^{x_1 \ldots x_2}$ ? |
|
Oct 26 |
asked | Subgroups generators with respect to group generators of composite order |
