meta user
network profile
| bio | website | people.scs.carleton.ca/~clark |
|---|---|---|
| location | Ottawa, Canada | |
| age | 32 | |
| visits | member for | 1 year, 10 months |
| seen | May 16 at 13:24 | |
| stats | profile views | 103 |
Postdoctoral fellow interested in authentication and cryptographic voting.
|
Mar 25 |
comment |
Can Elgamal be made additively homomorphic and how could it be used for E-voting? Reading between the lines of what you are asking, the answer is no. Elgamal can handle both multiplication and addition, but you cannot mix the two operations on any given ciphertexts. You must decide when you encrypt to lock the ciphertext into only doing addition or only doing multiplication. The ability to do both is a "fully homomorphic" cryptosystem, of which there are some, but they are mainly theoretical and too slow to be practical. One efficient scheme, BGN, allows a single multiplication and as many additions as you want. |
|
Feb 15 |
revised |
Encrypting a key with the same key added 19 characters in body |
|
Feb 15 |
answered | Encrypting a key with the same key |
|
Jan 16 |
comment |
Why is proof-by-reduction needed (for Elgamal proof of security, for example)? @Maeher is correct. What is amiss is that you are not considering all the values (that are functionally dependent on x,r,m) that you have available. As for a step-by-step proof, see: shoup.net/papers/games.pdf (Section 3). And read the whole paper if you want more intuition into how to structure proofs. |
|
Dec 4 |
awarded | Good Answer |
|
Oct 16 |
comment |
Can Elgamal be made additively homomorphic and how could it be used for E-voting? I don't know of any publications that directly compare Paillier with Elgamal in Gq or with ECC; although I haven't look too hard either. It is just accepted as folk wisdom I guess. |
|
Sep 21 |
awarded | Custodian |
|
Sep 18 |
reviewed | Approve suggested edit on I have a few questions about the random oracle model |
|
Sep 11 |
comment |
What is a “rewinding argument”? It is a little long, but I illustrate it in my answer to another question here: crypto.stackexchange.com/a/1412/64 |
|
Sep 10 |
revised |
Are picture files “random enough” to be usable as a one-time pad? deleted 1 characters in body |
|
Sep 10 |
answered | Are picture files “random enough” to be usable as a one-time pad? |
|
Sep 6 |
revised |
Bitcoin Research added 122 characters in body |
|
Sep 6 |
revised |
How are timestamps verified? edited tags |
|
Sep 6 |
revised |
Signature and Timestamp for Long Term Document Archival Question edited tags |
|
Sep 6 |
revised |
Timestamping services authorities, utilizing Linked, hybrid and other than PKI schemes edited tags |
|
Sep 5 |
answered | Bitcoin Research |
|
Sep 4 |
answered | Proof that lottery does not know outcome of draw |
|
Aug 24 |
answered | Can Elgamal be made additively homomorphic and how could it be used for E-voting? |
|
Aug 14 |
answered | Approach towards anonymous e-voting |
|
Aug 13 |
answered | Existing works on pre-computing ElGamal ephermal keys |
