network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 4 months |
| seen | May 8 at 19:57 | |
| stats | profile views | 0 |
|
May 8 |
awarded | Commentator |
|
May 8 |
accepted | What does $(\mathbb{Z}_n^*)^2$ mean? |
|
May 8 |
comment |
What does $(\mathbb{Z}_n^*)^2$ mean? @HenrickHellström: I have looked a little bit around. The theorem was copied from another paper. In the original paper they have never used quadratic residues but Cartesian products. It makes all sense now! Thanks a lot for your help! |
|
May 8 |
revised |
What does $(\mathbb{Z}_n^*)^2$ mean? added 265 characters in body |
|
May 8 |
comment |
What does $(\mathbb{Z}_n^*)^2$ mean? Thanks for your answer. I have inserted the theorem which contains $\mathbb{Z}_n^*$. I think what they really mean is $(g, h) \in (\mathbb{Z}_n^∗)^2$, or? |
|
May 8 |
awarded | Editor |
|
May 8 |
revised |
What does $(\mathbb{Z}_n^*)^2$ mean? added 265 characters in body |
|
May 7 |
asked | What does $(\mathbb{Z}_n^*)^2$ mean? |
|
Apr 28 |
comment |
Question about proof of knowledge defintion? thanks for your answer, but I don't get why the number of trials is important. The term says that $K$ returns the secret in polynomial time ($|x|^c$), right? Do you know, why the factor $1/..$ is important (why not write just $|x|^c$)? |
|
Apr 28 |
awarded | Informed |
|
Apr 28 |
asked | Question about proof of knowledge defintion? |
|
Apr 15 |
accepted | Comprehension question on a signature protocol based on the RSA assumption |
|
Apr 14 |
comment |
Comprehension question on a signature protocol based on the RSA assumption your answer really, really helps! Thanks a lot!!! The paper is about the CL-protocol (tor-svn.freehaven.net/anonbib/cache/camenisch2002ssep.pdf). They choose $n$ as a safe prime product, so you are right in general. What I still don't get is why they say, that the exponent (in the paper they call it $e$ instead of $x$) must be prime. |
|
Apr 14 |
asked | Comprehension question on a signature protocol based on the RSA assumption |
|
Apr 12 |
accepted | What does “adaptively secure” mean? |
|
Apr 10 |
asked | What does “adaptively secure” mean? |
|
Mar 8 |
comment |
Zero-knowledge proof that a group element is a quadratic residue? A signature of knowledge means to use the Fiat-Shamir heuristic to make a ZK proof protocol non-interactive. It uses the output of a hash function as the challenge. Security is then also based on the random oracle model. |
|
Mar 8 |
asked | Zero-knowledge proof that a group element is a quadratic residue? |
|
Mar 8 |
awarded | Supporter |
|
Mar 8 |
accepted | How difficult is it to check if a group element is in a sub group? |
