1,363 reputation
518
bio website
location Saarbrücken, Germany
age 27
visits member for 3 years
seen 21 hours ago

Feb
2
comment Going Blind, Group or Ring?
Basically, Alice would have to prove that she does NOT know the secret key used for signing. And unless I'm missing something, that should be impossible, because the instance of Alice that knows the key can always simulate an instance of Alice that has less knowledge.
Jan
31
comment Is it ok to send part of digital signature if we have bandwidth constraints?
To be clear, I'm not aware of any non-deterministic MAC construction actually used anywhere in practice. As with any simple primitive, for a general definition I would refer to "Introduction to Modern Cryptography" by Katz/Lindell. In particular Definition 4.1 on page 114. books.google.de/…
Jan
31
comment Is it ok to send part of digital signature if we have bandwidth constraints?
"for it is just as easy to verify a truncated MAC as is it to verify the original" this is of course only true for deterministic MACs with canonical verification. In general the definition of a MAC does not guarantee that that's the case.
Jan
31
comment Is it ok to send part of digital signature if we have bandwidth constraints?
Also, the digital signature scheme would have to be deterministic for the "recreate and check if equal" to work. Which is of course not the case for all signature schemes.
Jan
29
reviewed Approve suggested edit on Efficient Robust Private Set Intersection Additive ElGamal
Jan
29
comment Authentication and deniability
You may want to check out this question crypto.stackexchange.com/questions/5676/…
Jan
28
reviewed Close One-way function and uninvertible function
Jan
28
reviewed Close Are the protocols DH-EKE, B-SPEKE, A-EKE, and SRP are considered challenge-response authenticaion mechanisms?
Jan
28
reviewed Leave Open Question about SHA-2 (and potentially similar hashing algorithms)
Jan
28
reviewed Close Efficiently computing the neutral element in a ring isomorphic to Z/NZ?
Jan
15
reviewed Close Many time pad attack
Jan
15
reviewed Reopen Java's SecureRandom & plaintext attack?
Jan
13
reviewed Leave Closed Authentication of machine before installation (to stop piracy)
Jan
13
reviewed Close Can a salt for a password hash be public?
Jan
13
reviewed Leave Open Is it possible to use structures other than finite fields?
Jan
8
reviewed Reject suggested edit on Many time pad attack
Dec
19
awarded  Custodian
Dec
19
reviewed Close Differential Cryptanalysis of FEAL-4
Dec
19
reviewed Close Are there any systems like SDSI / SPKI that are currently being developed?
Dec
17
reviewed No Action Needed Diffie-Hellman on additive group