Reputation
1,423
Next privilege 1,500 Rep.
Approve tag wiki edits
Badges
4 15
Newest
 Yearling
Impact
~9k people reached

Aug
19
comment Example describing Baek and Zheng’s threshold identity-based decryption scheme
$k_3$ might be $12$ instead of $4$.
Jun
16
comment pseudo random generator from length preserving one way function which is not permutation!
Read the HILL paper or related papers.
May
24
reviewed Approve Elliptic Curve Cryptography Encryption and text representation implementation
May
24
reviewed Approve Alternative to NSA encryption algorithm
Apr
21
awarded  Yearling
Apr
17
revised Given a message and signature, find a public key that makes the signature valid (ECDSA)
(s_1,k_1) -> (s_1,r_1) as @Ruggero pointed out. Describe the attack.
Apr
17
comment Given a message and signature, find a public key that makes the signature valid (ECDSA)
Thank you for pointing out my mistake. Well, I correct the form of the signature. But, please notice that the attack I described does not require knowledge of $k_1$.
Apr
6
comment Pseudorandom Function Proof
what happens if I query x=011...1 to your second candidate?
Feb
24
revised Randomness re-use in LWE encryption scheme
Correct minor typo
Feb
24
comment Randomness re-use in LWE encryption scheme
I'm sorry that I omit the details. I used the generalized leftover hash lemma, instead of the leftover hash lemma. Since $rb$ leaks $\log{q}$-bit information of $r$, I set $m \geq (n+2) \log q\ \ldots$ instead of $m \geq (n+1) \log q\ \ldots$. I'll add more explanations.
Feb
23
answered Randomness re-use in LWE encryption scheme
Feb
23
comment Zero Knowledge Non Interactive Proof with random oracle
Hint: Notice that the simulator can program the random oracle and the original protocol is honest-verifier ZK.
Dec
5
awarded  Revival
Sep
30
awarded  Explainer
Aug
20
reviewed Approve S-box with differential uniformity = 2
Aug
4
comment Public key in fully homomorphic encryption over the integers
What happens if you set it even?
Jul
24
comment Universal hashing techniques based on matrix multiplication
Proving \epsilon-universality of random matrix hashing sounds an execise. I once found proofs in Shoup's textbook.
Jun
8
reviewed Approve Why are there only positive value points on an elliptic curve?
Jun
8
reviewed Approve RSA encryption and signature padding flaw
Jun
1
comment Reductionist proofs of decisional problems to computational
Do you need more explanation or easier one, e.g., "SearchLWE vs DecisionalLWE"?