Maeher
Reputation
1,612
Top tag
Next privilege 2,000 Rep.
Access moderator tools
 Sep24 reviewed Approve Montgomery Multiplication in FPGA explanation Jul13 comment pairing-based schemes Well scalar multiplication does not have bilinearity, a pairing does. Jul2 reviewed Approve How do I choose the best 3*3 s-boxes? Jun24 comment Is there a way to compress multiple signatures of the same data? Aggregate Signatures are more general than that, but might offer you what you want. Jun21 reviewed Approve How to calculate inverse affine transform in AES from forward affine transform? Jun21 reviewed Approve Is there a malleable pubkey digital signature scheme? Jun21 reviewed Approve Hill cipher key space Jun21 reviewed Approve Unblind a RSA blinded signature Jun12 reviewed Approve How realistic is a dictionary attack on a secure remote password protocol (SRP) verifier? May29 reviewed Approve Encryption time in ECC May28 reviewed Approve Is the logic for how the enigma machine worked documented somewhere? May28 reviewed Approve how much trust can we place in protocol verifiers? May22 comment One-time pad, zero key and Shannon By "using Shannon" you mean applying Shannon's theorem? Sure, you can define your key-generation algorithm to pick the all zero key with probability 0 and all others with probability $1/(|\mathcal{M}|-1)$. That's exactly your encryption scheme. Then apply the theorem which states that the scheme is perfectly secret if and only if two condition hold. One of those conditions is that every key is chosen with the same probability, which obviously does not hold. May22 comment One-time pad, zero key and Shannon @CGFoX Well, we are talking about the OTP here (except that the all zero key is not allowed), so by definition, $\mathcal{M}=\mathcal{C}=\{0,1\}^n$. But even if they are some other sets. If the set of keys has an element less that the messages, then for any ciphertext $c$, there exists at least one message $m$ that cannot possibly result in $c$ no matter which key is chosen. May21 reviewed Reject Shamir Secret sharing - Can share generator keep x values secret? May21 reviewed Reject Shamir Secret sharing - Can share generator keep x values secret? May21 revised One-time pad, zero key and Shannon Added a bit more explanation, why this is a valid argument. May21 answered One-time pad, zero key and Shannon May21 comment Which concrete applications benefit from Oblivious RAM constructions? @e-sushi I don't quite get what your comment is trying to convey. He is NOT asking about attacks on ORAM (this is indeed a much used abbreviation). He is asking about the attacks on non oblivious encrypted data-structures that are the motivation to develop ORAM construction (be that Hash based or whatever) May21 reviewed Close encryption and decryption time for RSA-crt in java?