1,392 reputation
619
bio website
location Saarbrücken, Germany
age 27
visits member for 3 years, 3 months
seen 4 hours ago

Jan
22
comment Is it an example of bilinear pairing?
The second one is not bilinear: $e(x,y^z) =x^{(y^z)} \neq (x^{yz})} = e(x,y)^z$. For the first one I don't see the problem with bilinearity at the moment, but the group is pretty useless for crypto since discrete log is trivial.
Jan
12
reviewed Approve How much (home PC) CPU time is required to generate a prime number of a given size?
Jan
12
awarded  Enlightened
Jan
12
awarded  Nice Answer
Jan
2
comment Why is proof-by-reduction needed (for Elgamal proof of security, for example)?
@curious I'm only showing that the distribution is not uniform, not that it can be efficiently distinguished from a uniform distribution.
Nov
16
comment plaintext distribution ,perfect secrecy cryptosystem
I'm not sure that the claim actually holds. Are you sure that there are no additional constraints on the "specific plaintext distribution"? Unless I'm confused, any encryption scheme (or even the identityfunction) offers perfect secrecy for the distribution that has probability 0 for all but one plaintext. But obviously this does not imply perfect secrecy for other distributions.
Oct
18
awarded  Yearling
Sep
30
awarded  Explainer
Sep
24
reviewed Leave Open stream cipher computation cost
Sep
24
reviewed Close Using modulus in one time pad?
Sep
24
reviewed Close Why are we advising PKI if we know that quantum computers will break them?
Sep
24
reviewed Close Key management for military GPS receivers
Sep
24
reviewed Close Base64 for a hash algorithm
Sep
24
reviewed Close Encryption with data loss protection
Sep
24
reviewed Needs Improvement Elliptic Curve Cryptography
Sep
24
reviewed Satisfactory The REACT transform and Replayable CCA
Sep
24
reviewed Satisfactory Secure MultiParty Computation with secret inputs for secret outputs
Sep
24
reviewed Needs Improvement Session-specific Symmetric Key Derivation Using SHA256
Sep
24
reviewed Satisfactory Is SRP post-quantum secure?
Sep
24
reviewed Satisfactory ECDSA with SHA256 and sepc192r1 curve: Impossible, or how to calculate $e$?