19,722 reputation
32171
bio website
location
age
visits member for 2 years, 11 months
seen 22 mins ago

Jan
10
answered Maximal-length LFSR with $n$ bits when the factorization of $2^n-1$ is unavailable?
Jan
10
comment Maximal-length LFSR with $n$ bits when the factorization of $2^n-1$ is unavailable?
Why would you need a LFSR of length $n=2991$? (1) Why would you need such a long LFSR? (2) Even if you needed a LFSR that has at least 2991 bits of state for some reason I haven't anticipated, why can't you just use a slightly larger LFSR, say $n=2992$?
Jan
10
comment How to prove that a ciphertext is encrypting multiplication of two values?
@curious, about your question on generic proof argument: see the sentence in my answer "It is known that every statement in NP..." Generic proof argument refers to a ZK proof that uses that general result.
Jan
10
comment How to judge if my work is meaningful in cryptography?
@Alex, I don't know! I can't answer that, without knowing what you mean by meaningful. I don't understand why you refuse to clarify. How are we supposed to help you if you won't tell us what you mean by "meaningful"? Is your definition of meaningful "approved by most of people in the field"? Is your question about how to get your work accepted in a conference? Is it about how to tell whether most people in the field agree with your results?
Jan
9
comment How to judge if my work is meaningful in cryptography?
I still don't understand what the author means by "meaningful". Do you mean "correct"? "important"? "novel"? "useful"? "valuable"? "worth money"? something else? The question needs a lot more clarification. P.S. I'm not sure what is meant by "Can I say...?" You can say anything you want; it doesn't mean you'll be right, but you can say it.
Jan
5
awarded  Popular Question
Jan
2
awarded  Famous Question
Dec
30
answered A timestamping authority (digital notary)
Dec
29
comment Diffie-Hellman Secret Exponent Size and Shared Secret Usage
What's the question? The entire body of the question seems to be a bunch of sentences about what you are planning to do, but I can't see any specific question. We expect questions on this site to ask a specific, objectively answerable question.
Dec
28
answered What is 'Carry-forward verification' defense against MITM?
Dec
28
revised What does this Authentication protocol achieve and what information is shared?
Make the question more concise (by removing parts that aren't really relevant), and link to the related question.
Dec
28
revised How to attack this authentication protocol from “Cryptography: An introduction”
Link to related protocol.
Dec
28
revised Automated security protocol verification tool for eCK model
Improve the title to be represent the question more accurately.
Dec
26
answered How to prove that a ciphertext is encrypting multiplication of two values?
Dec
26
comment Zero knowledge proof protocol example?
Paul Wagland is 100% correct. If Bob is teasing (he is lying, and Alice is actually wearing two same-color gloves), then there's no way Bob will be able to fool Alice into thinking her gloves are mismatched. But, if Bob claims that Alice is wearing matched gloves, Alice has no way to tell whether Bob is telling the truth or not (Bob might have noticed that Alice is wearing mismatched gloves and decided to lie about it; then when they conduct the ZKP, he answers randomly). In other words: there's a proof that Alice's gloves are mismatched, but there's no proof that Alice's gloves are matched.
Dec
26
comment Does the key schedule function need to be a one-way function?
This question is not clear about what function is/isn't one-way. And, I can't make any sense of the very first sentence of the post. (Are you perhaps making some assumptions about what a key schedule must look like? If so, those assumptions are not valid. Many key schedules don't look anything like that.) Anyway, I think the question is poorly framed; it is too hard to tell what you're asking.
Dec
26
answered Security Level Estimate when Cascading/Compositing Ciphers?
Dec
26
comment Security Level Estimate when Cascading/Compositing Ciphers?
You've loaded too many questions together into one. Please pick one question per question. Your first question is too broad; the answer will depend upon whether you're talking about a block cipher or something else. I suggest you just tell us about the real problem you have; or else ask multiple separate questions.
Dec
23
answered Can the passphrase of a PGP key be deduced from an old backup?
Dec
23
comment Now that quantum computers have been out for a while, has RSA been cracked?
This answer does not seem to add any added value over the existing answers.