12,675 reputation
21656
bio website pwnhome.wordpress.com
location
age
visits member for 2 years, 7 months
seen 6 hours ago

I like crypto. Need I say more?


May
30
answered What is a definition of a nonce?
May
30
reviewed Reviewed The exact difference between a permutation and a substitution
May
30
revised The exact difference between a permutation and a substitution
giving thanks in question not necessary
May
30
reviewed Approve suggested edit on Pen-and-paper one-way function for externally-anonymous survey
May
30
reviewed Approve suggested edit on How well analyzed are giant block length ciphers?
May
28
comment University for Crypto grad study
To add to some of the other posts, a big think you will need to do is narrow down what you mean when you say "Crypto". Crypto is very broad. Are you interested in symmetric crypto, public key crypto, homomorphic crypto, multiparty computation, cryptanalysis, applications of crypto, etc? Answering this will be a very important first step.
May
28
reviewed Approve suggested edit on Why is verification using DSA slower than verification with RSA?
May
28
comment University for Crypto grad study
Most of the IACR job postings these days are for students that want to get MS or PhD studying cryptography. Look through those, find a topic that interests you and you may be able to get your degree paid for. That said, the question is off-topic here, but I hope you've gotten some helpful inputs.
May
23
awarded  Convention
May
23
reviewed Approve suggested edit on What is the fastest elliptic curve operation f(P) in affine coordinates such that f^n(P)=P only if n is large?
May
22
reviewed No Action Needed Why is SRP not widely used?
May
21
reviewed Close calculating beta for elgamal elliptic curves
May
21
comment calculating beta for elgamal elliptic curves
I'm going to close this for now. Please update to address exactly what you don't understand from the question I linked to above. Then we can reopen (just flag the question).
May
21
reviewed Approve suggested edit on Do I need to keep a 64-bit version number secret?
May
16
comment Understanding Feldman's VSS with a simple example
I think wikipedia is referring to the fact that if $g$ is a generator of $\mathbb{Z}_p^*$, then $(g^s \mid p)$ leaks the least significant bit of $s$ (HAC 3.9.1). Wikipedia only suggests choosing $g$ with prime order $q$ where $q\mid p-1$ in a parenthetical statement as kind of an afterthought. I'm assuming that is why they say $g^s$ leaks information.
May
16
revised Understanding Feldman's VSS with a simple example
fixed a mistake using t instead of q
May
16
comment Understanding Feldman's VSS with a simple example
Choosing $p,q$ in this manner ensures that the Legendre symbol of the secret $s$ is not leaked by the commitment $g^s$, correct? Specifically, the article on Wikipedia says the description of Feldman's VSS as written there is not secure as $g^s$ leaks information about $s$ (which I'm assuming is the Legendre symbol). Does choosing $p,q$ as you specify fix this problem?
May
15
comment calculating beta for elgamal elliptic curves
The equations are in the answers I linked to. What exactly don't you understand.
May
15
comment calculating beta for elgamal elliptic curves
crypto.stackexchange.com/questions/3907/… might help too.
May
15
comment calculating beta for elgamal elliptic curves
$\alpha+\alpha+\alpha+\alpha+\alpha+\alpha+\alpha$