657 reputation
311
bio website
location
age
visits member for 3 years, 1 month
seen Jun 8 at 20:49

Apr
10
asked Is there a simple zero knowledge proof of $x$ for $b=x^x\pmod p$?
Apr
8
asked Is there a malleable pubkey digital signature scheme?
Dec
19
answered Attack against modular inversion operation using side-channels?
Dec
15
asked Attack against modular inversion operation using side-channels?
Dec
10
answered Can one use a Cryptographic Accumulator to efficiently store Lamport public keys without the need of a Merkle Tree?
Dec
10
asked Can one use a Cryptographic Accumulator to efficiently store Lamport public keys without the need of a Merkle Tree?
Dec
2
asked How hard is to invert the function that computes the middle-bits of (x^2)?
Nov
14
answered Are there any bijective one-way functions not based on number-theoretic hardness assumptions?
Nov
7
asked Are there any bijective one-way functions not based on number-theoretic hardness assumptions?
Jul
22
asked Is there any weak message for an ECDSA signature?
Mar
11
answered Diffie-Hellman key agreement with both Server Authentication and Perfect Forward Secrecy
Mar
9
asked Can one detect if two pairs of elements in Zp have the same exponential relation?
Feb
23
asked How hard is a known prefix hash preimage attack?
Feb
22
asked Why nobody considers counter re-keying as a standard Block Cipher Mode?
Jan
28
asked How is the x coordinate of a “point at infinity” encoded in a Secp256k1 signature?
Oct
31
asked Is there a practical zero-knowledge proof for this special discrete log equation?
Oct
30
asked How can I prove in zero knowldege that an ElGamal shuffle is correct for a special setting?
Oct
29
asked Can ElGamal encryption and ElGamal signatures be used together sharing the same key-pairs?
Oct
11
asked Is there a public key semantically secure cryptosystem for which one can prove in zero knowledge the equivalence of two plaintexts?
Oct
9
answered What is the theoretical and practical status of mental poker?