14,060 reputation
21660
bio website pwnhome.wordpress.com
location
age
visits member for 2 years, 11 months
seen 2 hours ago

I like crypto. Need I say more?


Nov
27
comment Homomorphic Encryption and Semantic Security using Lattices?
Is there a reason you chose that specific FHE cipher? I believe the standard LWE ciphers are much less efficient compared to the ring LWE ciphers.
Nov
27
answered How do you prevent the risk of damage to the security of Fully Homomorphic Encryption?
Nov
27
comment What are the practical difference between 256-bit, 192-bit, and 128-bit AES encryption?
Came across this today. Very good. The wikipedia article on AES confused me. Under The MixColumns Step they give the a matrix used for multiplication when using a "128-bit key". Thought the mix columns step was the same for all key sizes in AES, but different when the block size changes. Is wikipedia wrong?
Nov
26
awarded  Popular Question
Nov
25
revised Shamir's Simple Sharing Scheme - preventing partial recovery of data
added 138 characters in body
Nov
25
answered Shamir's Simple Sharing Scheme - preventing partial recovery of data
Nov
25
comment Shamir's Simple Sharing Scheme - preventing partial recovery of data
Can you post a link to the online system? XOR secret sharing would exhibit the behavior you describe.
Nov
22
comment What scheme will allow merging and splitting the result of a function?
Could you give a simple concrete example of what you are looking for but w/o any crypto? I'm still just having a hard time understanding the question.
Nov
21
answered Homomorphic Encryption, LWE, and Practical Applications
Nov
21
comment What scheme will allow merging and splitting the result of a function?
what do you mean by merge? Or what is the security goal of the merge? So that B doesn't know which request came from which user?
Nov
21
awarded  Nice Answer
Nov
20
answered Secure function evaluation
Nov
20
revised Secure function evaluation
edited tags
Nov
20
comment Secure function evaluation
Is $f(a,b,c)=a+b+c$ or $a\oplus b\oplus c$?
Nov
19
answered Difference between computational and statistical indistinguishabilities
Nov
19
revised Difference between computational and statistical indistinguishabilities
deleted 17 characters in body
Nov
15
comment Why do the outputs of parties in an MPC protocol have to be indistinguishable from the ideal / real world (as opposed to inputs)?
The reason indistinuguishibility implies security is that the ideal world is secure by definition.
Nov
15
comment Why do the outputs of parties in an MPC protocol have to be indistinguishable from the ideal / real world (as opposed to inputs)?
Likely the secret state of each party includes that party's input.
Nov
14
comment Elliptic Curve Encryption Ciphertext Size
Arent EC Elgamal and ECIES the same thing?
Nov
14
comment Why have 4th and 5th steps in Needham-Schroeder Protocol?
B could do that, but that is application specific. There are tons of applications out there were all we need is authentication with no further encrypted communications (e.g., electronic system where I prove to you who I am and you open a door for me). $N_b-1$ is the number $N_b$ minus one. If the random nonce $N_b$ is chosen to be $5$, A would encrypt and send $4$. If A can't decrypt, A can't get $N_b$ so A can't send $N_b-1$.