Reputation
23,928
Top tag
Next privilege 25,000 Rep.
Access to site analytics
Badges
6 37 88
Newest
 Nice Answer
Impact
~639k people reached

Apr
25
revised Timestamping using a hashed linked list and public known events
added 453 characters in body
Apr
25
comment Nonlinearity of the J-K Flip Flop
@WilliamHird, I think you might have a misconception. It sounds like you want to design a secure stream cipher, and your approach is to try to find a function that in isolation has some combinatorial properties. This has two problems: (1) to design a secure stream cipher, you need to look holistically at the entire design; you can't just pick out one component/function used in the stream cipher and say that "since it has properties X,Y,Z, the cipher is secure"; (2) designing secure ciphers is very hard, and you're unlikely to do better than existing state-of-the-art schemes.
Apr
25
answered Multiple-prime RSA; how many primes can I use, for a 2048-bit modulus?
Apr
25
asked Multiple-prime RSA; how many primes can I use, for a 2048-bit modulus?
Apr
25
asked Zero-knowledge proof of a product
Apr
25
answered Can I prove set membership and uniqueness without revealing the element?
Apr
25
answered Can we parallelize the Feistel Networks?
Apr
25
answered Timestamping using a hashed linked list and public known events
Apr
21
comment Stateless hash based public key cryptography?
@HenrickHellström, the blog post (the first URL) has some more details. We save only the first level -- that's generated during key generation and treated as part of the private key. We regenerate the subtrees on the fly as needed. How are they generated? They can be generated via a GGM construction from a seed (e.g., computed as a PRF of some master key that's part of the private key, plus an identifier that identifies which subtree we're looking at). There's no need to save the subtrees, since they can be generated deterministically on demand as needed. Does that answer your questions?
Apr
21
answered Stateless hash based public key cryptography?
Apr
20
answered MAC security and adversaries with memory
Apr
17
comment Is the strength of RSA over quadratic or other cyclotomic fields as strong as over the integers?
Can you explain what you mean by "compose the modulus of some other quadratic ring"? Do you mean that instead of multiplying two integers to get the modulus, we multiply two elements of some quadratic ring? Have you worked out what the corresponding version of Euler's lemma is? What is the order of the multiplicative group of such rings? What's the motivation for your question? Are you hoping to get a cryptosystem that will be faster than RSA, for a given security level?
Apr
16
comment Are there any elliptic curve asymmetric encryption algorithms?
Thanks, DrLecter! Makes sense! On re-reading the question, the question is not as clear as I initially thought. The question says "Is there an algorithm which employs elliptic curve cryptography, fast asymmetric encryption, [...]" - I took that to mean it wants the encryption operation to be fast, like in RSA, but it's entirely possible that might not be the right reading. Perhaps the original author will take a moment to edit the question and make what he/she is looking for clearer.
Apr
16
comment Are there any elliptic curve asymmetric encryption algorithms?
Those are all good schemes, but doesn't the question ask for encryption to be fast like in RSA? Do any of these schemes support encryption that is as fast as RSA's encryption? As far as I can tell, none of them are -- have I misunderstood? I think there's a tradeoff: RSA encryption will be faster than the ECC schemes; the ECC schemes will be faster for everything else, and will have shorter keys.
Apr
15
revised Are AES-256's related-key weaknesses exploitable if it is used to build a hash?
added 139 characters in body
Apr
14
comment In Pedersen Key Distribution, can the public key be persistent?
Are you saying there is an attack if you re-use $(p,g,h)$ too many times? Are you saying that existing proofs don't make any promises if you re-use $(p,g,h)$ too many times? Can you give some intuition for what the nature of the alleged trouble is? I find it hard to believe that there is a real problem. It is bog-standard to re-use the public key $(p,g,h)$ in discrete-log-based cryptosystems; is there any reason that Pederson would be different?
Apr
14
answered Are AES-256's related-key weaknesses exploitable if it is used to build a hash?
Apr
13
reviewed Edit knapsack tag wiki
Apr
13
revised knapsack wiki description
deleted 151 characters in body
Apr
13
reviewed Reject knapsack tag wiki excerpt