fgrieu

9,889 reputation

1237

bio	website
	location	Paris, France
	age
visits	member for	1 year, 9 months
	seen	13 hours ago
stats	profile views	93

I'm an engineer with experience in applied cryptography, in particular in Smart Card systems.

	9,889 reputation	bio	website		visits	member for	1 year, 9 months
1237 badges		location	Paris, France		seen	13 hours ago

summary answers questions tags badges favorites bounties reputation activity

21 Questions

views newest activity votes

votes

answers

267

views

Are safe primes $p=2^k \pm s$ with $s$ small less recommandable than others as a discrete log modulus?

discrete-logarithm prime-numbers

mar 25 at 19:11 Samuel Neves 1,027

votes

answers

317

views

Proving knowledge of a preimage of a hash without disclosing it?

hash zero-knowledge-proofs

oct 16 at 16:02 bob 772

votes

answers

133

views

What changed in PKCS#1 v2.2, and why?

rsa

mar 8 at 6:53 fgrieu 9,889

votes

answers

228

views

How to construct a good PRF from a block cipher?

pseudo-random-function

nov 23 at 19:37 Ilmari Karonen 6,291

votes

answer

556

views

Duration for attacking Two-Key Triple-DES Encryption using all RAM ever built?

cryptanalysis brute-force-attack

jun 18 '12 at 18:39 fgrieu 9,889

votes

answers

402

views

Is an RSA variant with public exponent $e=f+(p-1)\cdot(q-1)$ safe (for $f$ random in some small interval)?

rsa

nov 6 at 11:56 fgrieu 9,889

votes

answer

276

views

Hash function from narrower block cipher operated in CBC-encryption mode?

hash block-cipher

oct 24 at 9:34 bob 772

votes

answer

108

views

Why does it matter for a signature scheme to be without random oracles?

signature random-oracle-model

jun 29 at 20:26 David Schwartz 2,647

votes

answers

236

views

Attacks of the MAC construction $\mathcal{H}(m||k)$ for common hashes $\mathcal{H}$?

hash cryptanalysis mac

may 30 '12 at 23:00 fgrieu 9,889

votes

answers

537

views

How much can we compress RSA public keys?

rsa key-size compression

jan 27 '12 at 10:24 fgrieu 9,889

votes

answer

116

views

In textbook RSA with low public exponent, how big does a random message needs to be?

rsa

apr 26 at 10:36 fgrieu 9,889

votes

answers

285

views

How many bits can be safely extracted from the BBS generator at each step?

random-number-generator blum-blum-shub

aug 17 at 22:24 D.W. 7,979

votes

answer

361

views

Is a second preimage attack on MD5 feasible?

hash md5 2nd-preimage-resistance

aug 3 at 17:35 D.W. 7,979

votes

answer

113

views

In RSA, rationale for prime $p$ with $p-1$ having prime factor $u$ with $u-1$ having large prime factor?

rsa prime-numbers

apr 7 '12 at 18:56 Samuel Neves 1,027

votes

answer

237

views

On-the-fly computation of AES Round Keys for decryption?

aes implementation

dec 22 at 8:18 fgrieu 9,889

votes

answer

440

views

RSA-based authentication and key-agreement protocol

rsa protocol-design authentication key-exchange

dec 12 '11 at 15:47 PulpSpy 4,489

votes

answer

122

views

Proof that Alternating Step Generator and modifed ASG' have equivalent security?

cryptanalysis random-number-generator stream-cipher alternating-step

aug 19 '11 at 9:24 fgrieu 9,889

votes

answers

107

views

Odds of false error detection in a randomness test using the chi-squared test?

random-number-generator statistical-test

jan 3 at 8:20 fgrieu 9,889

votes

answers

135

views

Proof that a function constructed from a PRP is, or is not a PRF?

pseudo-random-function

nov 20 at 21:02 D.W. 7,979

votes

answer

views

How do we find the last two correspondences in an otherwise known even permutation?

permutation

dec 2 '11 at 22:42 fgrieu 9,889

vote

answer

113

views

Do Quantum Key Distribution and Physical Unclonable Functions combine, and how?

key-exchange quantum-cryptography

jan 20 at 8:00 Thomas 2,589