2,022 reputation
112
bio website
location
age
visits member for 1 year, 6 months
seen yesterday

Jan
13
reviewed Leave Open Automated testing of cipher security for import/export compliance
Jan
13
awarded  Custodian
Jan
13
reviewed No Action Needed How does asymmetric encryption work?
Jan
13
awarded  Custodian
Jan
13
reviewed No Action Needed ASN.1 encoding off RSASSA-PSS default parameters
Jan
13
reviewed Close Entropy in relation to computer security
Jan
13
answered Implementing a web app where the server cannot decrypt its own data?
Jan
13
comment Key derivation of public key without knowledge of private key?
Yep. ten letters
Jan
12
comment Key derivation of public key without knowledge of private key?
The Elgamal signature scheme is quite different from the Elgamal encryption scheme. This idea won't work for Elgamal signatures, indeed, it can't work for any signature scheme.
Jan
12
comment Key derivation of public key without knowledge of private key?
Any encryption of $1$ can be used as a public key. The extra per-key information is not needed, as the same decryption key can be used for all the public keys made in this way.
Jan
11
reviewed Leave Open Use of Diffie-Hellman key agreement in matrix (semi)groups
Jan
11
awarded  Custodian
Jan
11
reviewed Close private keys for multiple devices
Jan
11
answered Key derivation of public key without knowledge of private key?
Jan
11
comment How much (home PC) CPU time is required to generate a prime number of a given size?
Would you do AKS for every candidate? Why not eliminate candidates with simpler tests first, then do AKS (or ECPP) once you know you have a prime?
Jan
11
comment Strength of RSA with OAEP
You could also mention that RSA-KEM is often a better alternative than RSA-OAEP (simpler, better security guarantee).
Jan
8
comment Variant of the Decisional Bilinear Diffie Hellman problem
I've looked at it for a few minutes, and I wouldn't expect them to be equivalent. The information about $y$ in your problem lies only in the field. To get a DBDH relation related to $y$ seems to require some kind of pairing inversion, which is very hard to do.
Jan
6
awarded  Nice Answer
Jan
6
revised Why is the private key generated first in public key crypto?
added 10 characters in body
Jan
6
revised Why is the private key generated first in public key crypto?
deleted 1 character in body