14,060 reputation
21660
bio website pwnhome.wordpress.com
location
age
visits member for 2 years, 10 months
seen 4 hours ago

I like crypto. Need I say more?


Nov
26
awarded  Popular Question
Nov
25
revised Shamir's Simple Sharing Scheme - preventing partial recovery of data
added 138 characters in body
Nov
25
answered Shamir's Simple Sharing Scheme - preventing partial recovery of data
Nov
25
comment Shamir's Simple Sharing Scheme - preventing partial recovery of data
Can you post a link to the online system? XOR secret sharing would exhibit the behavior you describe.
Nov
22
comment What scheme will allow merging and splitting the result of a function?
Could you give a simple concrete example of what you are looking for but w/o any crypto? I'm still just having a hard time understanding the question.
Nov
21
answered Homomorphic Encryption, LWE, and Practical Applications
Nov
21
comment What scheme will allow merging and splitting the result of a function?
what do you mean by merge? Or what is the security goal of the merge? So that B doesn't know which request came from which user?
Nov
21
awarded  Nice Answer
Nov
20
answered Secure function evaluation
Nov
20
revised Secure function evaluation
edited tags
Nov
20
comment Secure function evaluation
Is $f(a,b,c)=a+b+c$ or $a\oplus b\oplus c$?
Nov
19
answered Difference between computational and statistical indistinguishabilities
Nov
19
revised Difference between computational and statistical indistinguishabilities
deleted 17 characters in body
Nov
15
comment Why do the outputs of parties in an MPC protocol have to be indistinguishable from the ideal / real world (as opposed to inputs)?
The reason indistinuguishibility implies security is that the ideal world is secure by definition.
Nov
15
comment Why do the outputs of parties in an MPC protocol have to be indistinguishable from the ideal / real world (as opposed to inputs)?
Likely the secret state of each party includes that party's input.
Nov
14
comment Elliptic Curve Encryption Ciphertext Size
Arent EC Elgamal and ECIES the same thing?
Nov
14
comment Why have 4th and 5th steps in Needham-Schroeder Protocol?
B could do that, but that is application specific. There are tons of applications out there were all we need is authentication with no further encrypted communications (e.g., electronic system where I prove to you who I am and you open a door for me). $N_b-1$ is the number $N_b$ minus one. If the random nonce $N_b$ is chosen to be $5$, A would encrypt and send $4$. If A can't decrypt, A can't get $N_b$ so A can't send $N_b-1$.
Nov
14
revised Scalar Multiplication on Elliptic Curves
added 11 characters in body
Nov
14
answered Scalar Multiplication on Elliptic Curves
Nov
14
revised Scalar Multiplication on Elliptic Curves
added 1 characters in body