20,795 reputation
32575
bio website
location
age
visits member for 3 years, 4 months
seen Dec 23 at 12:28

Dec
19
revised What is an easy method of proving that a cryptographic oracle attack is possible?
deleted 1 characters in body; edited title
Dec
19
answered What is an easy method of proving that a cryptographic oracle attack is possible?
Dec
19
comment construct an election protocol for the following election problem..?
Can you say anything about what practical context this problem arose in?
Dec
19
revised construct an election protocol for the following election problem..?
deleted 14 characters in body
Dec
19
revised Proving that a scheme is not IND-CPA-secure
Clarify the question title; I found the previous one confusing.
Dec
19
comment How many bits of hash are realistically needed for key verification?
160 bits is overkill and bad for usability. I do not recommend it. See my answer for elaboration.
Dec
19
answered How many bits of hash are realistically needed for key verification?
Dec
19
comment Why is asymmetric cryptography bad for huge data?
Welcome to Crypto.SE. I encourage you to read the FAQ. In particular, we expect you to have "done your homework" before posting a question. This particular question must have been asked a dozen times on this site. Did you try a search? Also try looking at the questions in the Related bar. For instance, the 3rd in the list is crypto.stackexchange.com/q/586/351 which seems to answer your question satisfactorily.
Dec
18
comment Probability that an attacker wins the discrete logarithm game when exponents are drawn from a subset
By the way, welcome to Crypto.SE! I hope you'll stay in the community. May I encourage you to read the faq, to learn more about this site?
Dec
18
comment Probability that an attacker wins the discrete logarithm game when exponents are drawn from a subset
@user52914, again, that is off-topic. If you want to discuss it, please post a separate question. The more you discuss it here, the more sorry I am that I responded to your second question at all. As far as explaining the site -- well, it sounds like you are not clear on how to use it properly and so I do need to explain the site policies. And no, it is not this way to maximize reputation of users -- it is this way to maximize the utility of the site as an archive of quality answers to relevant questions. Off-topic comments reduce the ability of others to find this information.
Dec
18
comment Probability that an attacker wins the discrete logarithm game when exponents are drawn from a subset
@user52914, hire a cryptographer to prove it for you? At a meta level: this has now deviated pretty far from the original topic of this question, so I don't think it's on-topic on this question. FYI, Crypto.SE is not a discussion forum: it's a question-and-answer site. One question per question. If you have a question about the design of a particular system, I think you'll need to post a separate question. If you do that, make sure you post detailed enough information about the design of the system that analysis is possible.
Dec
18
answered Why is h(m||k) insecure?
Dec
18
answered How to generate a random integer in interval $[1, 2^n-1]$ from random integer in interval $[0, 2^n-1]$?
Dec
18
answered Tweaking textbook RSA to make the encryption a Pseudorandom function
Dec
17
revised Probability that an attacker wins the discrete logarithm game when exponents are drawn from a subset
added 333 characters in body
Dec
17
comment Probability that an attacker wins the discrete logarithm game when exponents are drawn from a subset
@user52914, as far as I can see, nothing terribly bad should happen. Releasing $y_1+y_3$ and $y_2+y_3$ doesn't reveal much more information than releasing $y_1-y_2$. And releasing $y_1-y_2$ does not help find $y_1$ or $y_2$ (though if you somehow manage to learn one of $y_1$ or $y_2$, obviously knowledge of $y_1-y_2$ reveals the other).
Dec
16
answered Is there a big RSA Data Set
Dec
16
answered Probability that an attacker wins the discrete logarithm game when exponents are drawn from a subset
Dec
12
revised Why doesn't this replay attack work on ECDSA?
added 1473 characters in body
Dec
12
answered Why doesn't this replay attack work on ECDSA?