DrLecter's user avatar
DrLecter's user avatar
DrLecter's user avatar
DrLecter
  • Member for 10 years, 6 months
  • Last seen this week
  • Vienna, Austria
2 votes

Are CDH and Square-DH equally hard?

2 votes

A confusion about HMQV?

2 votes

Is there proof to the relation between the gap Diffie-Hellman problem and the the Cha-Cheon signature scheme?

2 votes
Accepted

Can you help me understand pairing $e:G \times G \to G_T$ and ( Decision) BDH assumption?

2 votes
Accepted

What does the linear assumption over bilinear groups mean?

2 votes
Accepted

Elliptic Curve Encryption Ciphertext Size

2 votes

PPT eavesdroper able to output $m_{0}$ and $m_{1}$ of different lengths

2 votes

Private Information Retrieval with a pre-prepared database

2 votes

ElGamal signature: Forging a signature of a specific form

2 votes

Discrete logarithm hash function Exercises

2 votes
Accepted

Anonymity problem after voting with blind signatures

2 votes

In case M is small is it possible to recover the message

2 votes

How to break Universal Re-Encryption algorithm?

2 votes

Multiplication vs exponentiation in pairing based cryptography

2 votes
Accepted

On the fly signatures and zero-knowledge

2 votes

Does the Paillier system remain secure if it is used to encrypt only binary values, i.e. {0, 1}?

2 votes
Accepted

NIZK Proof of knowledge N of M discrete logarithms (threshold)

2 votes

Use of ElGamal encryption for signature generation

2 votes
Accepted

Does the following linear equation hold in bilinear pairings?

1 vote
Accepted

RSA-blind signatures vs. DSA-blind signatures

1 vote
Accepted

Proving correctness of a decryption of a homomorphically summed ciphertext?

1 vote

Encrypt a Zip File with Caesar Cipher

1 vote
Accepted

Partial Homomorphic Schemes that are probabilistic

1 vote

Weak Boneh-Boyen Signature in Composite order group

1 vote
Accepted

In bilinear pairings, is it possible to let someone be only able to decrypt ciphertexts in $G_1$ but not able to decrypt the ciphertexts in $G$?

1 vote
Accepted

Reordering of multiple signed blocks

1 vote

Why is only one oracle + challenge-response phase sufficient for IND-CPA security?

1 vote

Plausible Deniability in Schnorr

1 vote
Accepted

Does security against a CCA1 attacker imply security against a CPA attacker?

1 vote
Accepted

Why is this signature independent of the message?

1
3 4 5
6
7