Reputation
6,143
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
1 15 32
Newest
 Nice Answer
Impact
~142k people reached

Jul
20
suggested approved edit on
Jul
20
wiki
Jul
20
wiki
Jul
20
suggested approved edit on
Jul
20
suggested approved edit on
Jul
20
wiki
Jul
20
wiki
Jul
20
suggested approved edit on post-quantum-cryptography tag wiki excerpt
Jul
20
suggested approved edit on post-quantum-cryptography tag wiki
Jul
20
wiki created post-quantum-cryptography description
Jul
20
wiki created post-quantum-cryptography excerpt
Jul
19
revised Are there asymmetric cryptographic algorithms that are not based on integer factorization and discrete logarithm?
I meant encryption as opposed to signatures etc
Jul
19
revised Are there asymmetric cryptographic algorithms that are not based on integer factorization and discrete logarithm?
added 55 characters in body
Jul
19
answered Are there asymmetric cryptographic algorithms that are not based on integer factorization and discrete logarithm?
Jul
19
comment Tactics available to help prove security of a new system?
I'll be the bad cop and say that if (1) you've already designed the cipher and only now are thinking about security, (2) are new to cryptanalysis and (3) you think a 4096 bit key is good — in fact if just one of these things — you are already in over your head. I don't want to discourage you and sometimes learning by doing is the best way but designing secure encryption schemes is very hard and requires years of expertise. (I say this as someone who myself would never dream of designing a block cipher or hash function.)
Jul
18
comment Why is there an enormous difference between SAT solvers?
This would be better suited on CSTheory SE. I think it is on topic for Crypto, but you will certainly get a better response there.
Jul
17
comment Reduction from signatures to encryption?
Nice answer. I agree with your caveats regarding my cheat and RSA. (I have a few comments when at keyboard not on my phone).
Jul
17
comment Reduction from signatures to encryption?
(1) Right it is not a reduction from any signature scheme, only ones with the condition that verification is not possible without the verification key. See fine print. (2) the adversary seeing the message only can make a selective forgery and obtain the same signature, assuming forgeries are easy and signature is deterministic. It only works under assumption that existential is easy and selective is hard.
Jul
17
revised Reduction from signatures to encryption?
added 175 characters in body
Jul
17
answered Reduction from signatures to encryption?