Reputation
21,615
Next tag badge:
97/100 score
23/20 answers
Badges
4 29 79
Impact
~449k people reached

Apr
25
asked Multiple-prime RSA; how many primes can I use, for a 2048-bit modulus?
Apr
25
asked Zero-knowledge proof of a product
Apr
25
answered Can I prove set membership and uniqueness without revealing the element?
Apr
25
answered Can we parallelize the Feistel Networks?
Apr
25
answered Timestamping using a hashed linked list and public known events
Apr
21
comment Stateless hash based public key cryptography?
@HenrickHellström, the blog post (the first URL) has some more details. We save only the first level -- that's generated during key generation and treated as part of the private key. We regenerate the subtrees on the fly as needed. How are they generated? They can be generated via a GGM construction from a seed (e.g., computed as a PRF of some master key that's part of the private key, plus an identifier that identifies which subtree we're looking at). There's no need to save the subtrees, since they can be generated deterministically on demand as needed. Does that answer your questions?
Apr
21
answered Stateless hash based public key cryptography?
Apr
20
answered MAC security and adversaries with memory
Apr
17
comment Is the strength of RSA over quadratic or other cyclotomic fields as strong as over the integers?
Can you explain what you mean by "compose the modulus of some other quadratic ring"? Do you mean that instead of multiplying two integers to get the modulus, we multiply two elements of some quadratic ring? Have you worked out what the corresponding version of Euler's lemma is? What is the order of the multiplicative group of such rings? What's the motivation for your question? Are you hoping to get a cryptosystem that will be faster than RSA, for a given security level?
Apr
16
comment Are there any elliptic curve asymmetric encryption algorithms?
Thanks, DrLecter! Makes sense! On re-reading the question, the question is not as clear as I initially thought. The question says "Is there an algorithm which employs elliptic curve cryptography, fast asymmetric encryption, [...]" - I took that to mean it wants the encryption operation to be fast, like in RSA, but it's entirely possible that might not be the right reading. Perhaps the original author will take a moment to edit the question and make what he/she is looking for clearer.
Apr
16
comment Are there any elliptic curve asymmetric encryption algorithms?
Those are all good schemes, but doesn't the question ask for encryption to be fast like in RSA? Do any of these schemes support encryption that is as fast as RSA's encryption? As far as I can tell, none of them are -- have I misunderstood? I think there's a tradeoff: RSA encryption will be faster than the ECC schemes; the ECC schemes will be faster for everything else, and will have shorter keys.
Apr
15
revised Are AES-256's related-key weaknesses exploitable if it is used to build a hash?
added 139 characters in body
Apr
14
comment In Pedersen Key Distribution, can the public key be persistent?
Are you saying there is an attack if you re-use $(p,g,h)$ too many times? Are you saying that existing proofs don't make any promises if you re-use $(p,g,h)$ too many times? Can you give some intuition for what the nature of the alleged trouble is? I find it hard to believe that there is a real problem. It is bog-standard to re-use the public key $(p,g,h)$ in discrete-log-based cryptosystems; is there any reason that Pederson would be different?
Apr
14
answered Are AES-256's related-key weaknesses exploitable if it is used to build a hash?
Apr
13
reviewed Edit knapsack tag wiki
Apr
13
revised knapsack wiki description
deleted 151 characters in body
Apr
13
reviewed Reject knapsack tag wiki excerpt
Apr
11
answered How do I express each element in a field F as a power of a primitive element?
Apr
7
comment How could Fully Homomorphic Encryption support power operations?
My perspective: The answer says that XOR and AND are universal, and thus any operation, including addition and multiplication, can be built out of XOR and AND gates. That is a correct statement. So the answer seems fine to me. But we can agree to disagree (or have a slightly different reaction) -- nothing wrong with that!
Apr
7
comment How could Fully Homomorphic Encryption support power operations?
@poncho, I don't understand your comment. This answer looks correct to me. The answer never says "ADD==XOR", does it? XOR and AND are universal; no need for NAND.