Reputation
3,212
Top tag
Next privilege 3,500 Rep.
Protect questions
Badges
11 24
Newest
 Enlightened
Impact
~38k people reached

  • 0 posts edited
  • 2 helpful flags
  • 522 votes cast
1d
awarded  Enlightened
1d
awarded  Nice Answer
Mar
29
awarded  Revival
Mar
28
answered What aspect of elliptic curve encryption paradigms makes them especially susceptible to quantum based attack algorithms?
Dec
17
comment N way collision of hashes
The exact work factor is worked out in Suzuki et al: $(n!)^{1/n}\cdot T^{1-1/s}$.
Nov
19
comment Do data-dependent rotations have any advantage over fixed rotations?
Probably. Analysis is still more difficult on data-dependent rotations, and so it may be wise to assume the attacker can force them to have no difference. This is especially the case in hash functions, where the attacker controls almost everything; here's an example. When assuming no differences in the rotations, fixed rotations start to seem like the better choice.
Nov
19
answered Do data-dependent rotations have any advantage over fixed rotations?
Nov
9
awarded  Enlightened
Nov
9
awarded  Nice Answer
Oct
30
comment What are these twist attacks with cost $2^{58.4}$ on NIST P-224 curve, and when do they apply?
Nevermind, I was assuming you had direct access to the points on the twist. Here you cannot use plain rho.
Oct
30
comment What are these twist attacks with cost $2^{58.4}$ on NIST P-224 curve, and when do they apply?
The complexity for kangaroo is slighly different when taking the negation map into account. You can use rho in this situation, though, like you would in Pohlig-Hellman.
Oct
30
comment What are these twist attacks with cost $2^{58.4}$ on NIST P-224 curve, and when do they apply?
$\log(\pi/4 l)/\log(4) = \log(\sqrt{\pi/4 l})/\log(2) = \log(\sqrt{\pi l / 2} / \sqrt{2})/\log(2)$. It's the usual Pollard rho complexity with the negation map taken into account.
Oct
29
revised Understanding Twist Security with respect to short Weierstrass curves
added 5 characters in body
Oct
29
revised Understanding Twist Security with respect to short Weierstrass curves
added 12 characters in body
Oct
29
revised Understanding Twist Security with respect to short Weierstrass curves
added 12 characters in body
Oct
29
revised Understanding Twist Security with respect to short Weierstrass curves
added 154 characters in body
Oct
29
revised Understanding Twist Security with respect to short Weierstrass curves
added 50 characters in body
Oct
29
revised Understanding Twist Security with respect to short Weierstrass curves
added 223 characters in body
Oct
29
answered Understanding Twist Security with respect to short Weierstrass curves
Oct
7
awarded  Revival