Reputation
6,751
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
1 12 35
Newest
 Nice Answer
Impact
~163k people reached

Jan
9
reviewed Approve openssl tag wiki
Jan
9
reviewed Approve openssl tag wiki excerpt
Jan
9
answered Why can’t the public key exponent in RSA be negative?
Jan
8
reviewed Approve What is an impure NIST true random number generator?
Jan
6
comment Protocol to identify zone of potential agreement without revealing reservation prices and having to trust third parties?
A somewhat related problem would be how to eliminate the risk of collusion. Suppose A is working with C, who is the "real" prospective buyer from B. A proposes a maximum price that is lower than what C is prepared to pay, and communicates the result to C, before C and B executes the protocol. This way C is able to start the negotiation with an offer that leads to a final price that is closer to B's minimum.
Jan
6
comment Mathematical Results on Hash Functions?
Actually, I do think it is expected of a post grad researcher to go through all of the references in relevant papers. And I do not count HAC as a first stop for a post grad student. But you are not the first one to get the impression your question indicates. The SHA-3 competition was motived by vaguely similar concerns.
Jan
3
comment Is CPU timing jitter a usable entropy source?
I've been using CPU timing jitter as entropy source on a wide variety of CPU models since 2001. Perhaps the most important observation is that it has become more risky on modern multicore CPUs. If you are not careful, you might end up harvesting entropy from a core that is not used for anything else, meaning you will either end up with a poor entropy source, or be stuck in an endless loop.
Jan
2
comment Homemade Randomized RSA
Suppose you take a guess at $m$. Will you be able to tell if $(A,B)$ is an encryption of $m$ or not? (You will.)
Jan
2
comment Mathematical Results on Hash Functions?
This site isn't supposed to be your first stop for hints on reference suggestions, but in the spirit of the season I would suggest searching for the SHA-3 submission papers, since several have literature lists you might find interesting.
Jan
1
revised Shamir's Secret Scheme : Knowing the threshold
added 403 characters in body
Dec
28
comment Shamir's Secret Scheme : Knowing the threshold
@IlmariKaronen I understand, but shouldn't the fact that we are dealing with polynomials and not random functions affect that probability?
Dec
28
comment Shamir's Secret Scheme : Knowing the threshold
@IlmariKaronen Are you sure the probability is exactly $1/q$? I agree with the approximation, but would presume that two polynomials of degree $k+1$ and $t-1$, with $k+1 < t-1$, might intersect in up to $t-1$ different points; not $k+1$ points.
Dec
28
revised Shamir's Secret Scheme : Knowing the threshold
added 248 characters in body
Dec
28
answered Shamir's Secret Scheme : Knowing the threshold
Dec
18
reviewed Approve Clarification regarding multiple modular exponentiation
Dec
14
reviewed Close How much stronger is RC4 if it is keyed with an RSA private key?
Dec
14
comment Cost of attack on DSA with attack on DLP
You can't "optimize" Pollard Rho. It is what it is. You can however (a) modify the algorithm to use various trade-offs, or (b) optimize the implementations of the underlying arithmetic operations. In the former case you will get a different algorithms. which might or might not be faster depending on a lot of factors. In the latter case you might get a speed up by a constant factor.
Dec
13
reviewed Close What do you mean by Ciphertext indistinguishability
Dec
6
reviewed Close Can knowing part of what was used to generate an md5 hash make it vulnerable?
Dec
6
reviewed Leave Open Unconditionally Secure Authentication