482 reputation
212
bio website
location
age
visits member for 1 year
seen May 30 at 14:35

welcome to contact and communicate with me. email in here


Jul
30
awarded  Yearling
May
18
comment Is knowing the private key of RSA equivalent to the factorization of $N$?
when we select $e,d$, generally speaking, if they should $e,d <\phi(N)$ ?
May
12
comment RSA, finding p,q
see my question Is knowing the private key of RSA equivalent to the factorization of N?
May
11
accepted Is knowing the private key of RSA equivalent to the factorization of $N$?
May
9
comment Computational Diffie-Hellman problem over the group of quadratic residues
so if the CDH assumption over $\mathbb{QR}_N$ holds, then CDH assumption $\pmod{p}$ or CDH assumption $\pmod{q}$ may not hold; from other direction if CDH assumption $\pmod{p}$ or CDH assumption $\pmod{q}$ holds ,then certainly CDH assumption over $\mathbb{QR}_N$ holds. If I want to use this correctly, I'd better supposing CDH assumption $\pmod{p}$ or CDH assumption $\pmod{q}$ holds, is that right?
May
9
comment Computational Diffie-Hellman problem over the group of quadratic residues
how large of $p$ or $q$ at least to make sure the hardness of $CDH(U,V) \pmod{p}$ or $CDH(U,V) \pmod{q}$ ?
May
9
asked Computational Diffie-Hellman problem over the group of quadratic residues
May
6
comment Is knowing the private key of RSA equivalent to the factorization of $N$?
@CodesInChaos Do you mean that knowing $(N,e,d)$ if $e$ is big, then we cannot still factor $N$?
May
6
asked Is knowing the private key of RSA equivalent to the factorization of $N$?
Apr
20
comment CDH problem and Square-DH problem
As CDH problem and Square-DH problem are equal, Can I say that Gap-DH problem is equivalent to Square-DH problem equipped with DDH oralce ? It seems that they are equal, but I cannot find a reference to show this, can you provide me some references ?
Apr
15
comment Efficiency of computing $e(P,Q)$ Vs $g^a \pmod{p}$?
"or a given security level (e.g. that of 2048-bit RSA), usual pairings will entail a computational cost which is about 8 to 12 times the cost of decryption with 2048-bit RSA", can you show me some related references to support this sentence?
Apr
15
comment understanding pairing $e:G \times G \to G_T$ and ( Decision)BDH assumption
@tylo : "The only pairing friendly groups we know are all elliptic curves", can you show me some references to support this ?
Apr
13
comment Perfect Forward Secrecy in TLS
where do you read this from? Better provide the source
Mar
19
accepted Efficiency of computing $e(P,Q)$ Vs $g^a \pmod{p}$?
Mar
19
comment Efficiency of computing $e(P,Q)$ Vs $g^a \pmod{p}$?
can I say that the bilinear pairing is always defined over super singular elliptic curve group with large element size, so its computation is time-consuming?
Mar
7
comment Certificateless cryptography
since the public key used in certificateless cryptography is not certified, then there is scenario that someone will replace this public key for malicious use.
Mar
6
comment What key exchange protocols give Forward-Secrecy resisting future progress?
@DrLecter : when we consider the forward security, is it more meaningful to consider it combined with time ? In other words, for a certain session key, I just want to keep it safe for a couple of years. Then, at the end of this time, I don't care whether the information protested by the session key is exposed or not.
Mar
4
comment understanding forking lemma
I have a confusion in using the Forking lemma, that is, $H_1(**)H_2(***)$ is the multiplication of two random oracles $H_1$ and $H_2$, Can I just apply forking lemma to $H_1$, while $H_2$ won't be influenced. Like $H_1(**)H_2(***) \xrightarrow{forking \,lemma\, to\, H_1} H_1(**)'H_2(***)$
Mar
3
comment Is it meaningful to consider the leakage of master key of KGC?
yes, it's interesting, so you mean that it has meaning to consider the leakage of master key of KGC. But, the truth is I rarely encounter the paper in which it's considered. In general, maybe people don't consider this problem.
Mar
3
comment Is it meaningful to consider the leakage of master key of KGC?
@RickyDemer: I recommend heavily that you pack up all your commends into an answer, especially, have a good explanation about the completeness of KGC.