3,865 reputation
1621
bio website
location United States
age
visits member for 3 years, 2 months
seen 2 days ago

2d
comment Obliviously computing the Least common multiple of two poylnomials
What ring are those polynomials over? $\;$
Dec
23
reviewed Edit PBKDF vs HKDF for pretty long key
Dec
23
revised PBKDF vs HKDF for pretty long key
corrected grammar
Dec
23
answered why choose one-time signature ,not directly publish message
Dec
22
comment Which gives better deterministic encryption SIV or Plain ECB mode?
@pg1989 : $\:$ No; SIV also provides authentication. $\;\;\;\;$
Dec
22
comment Find private exponent in RSA
@Robert : $\;\;\;$ "Euler totient $\phi(n)$" $\: \mapsto \:$ "Carmichael function $\lambda(n)$" $\;\;\;\;\;\;\;$
Dec
21
revised Post-quantum hybrid encryption
put in missing word
Dec
21
answered Post-quantum hybrid encryption
Dec
20
revised Are there signatures that don't have subliminal channels?
fixed a hole
Dec
20
comment Are there signatures that don't have subliminal channels?
That's a ... fairly general definition of "a de randomization scheme". $\:$ The verifier can "be sure it was used" by putting the signature "through the modular exponentiation which is at the core of RSA", and checking whether or not the output is equal to what the first three steps produce. $\;\;\;\;$
Dec
20
answered Are there signatures that don't have subliminal channels?
Dec
18
comment Attacker in a key exchange
@Bimal : $\:$ What do A and B output as their keys? $\;\;\;\;$
Dec
18
comment Attacker in a key exchange
@GuutBoy : $\;\;\;$ The arrows mean sends to. $\:$ X(A) means the adversary while pretending to be A. $\hspace{.58 in}$
Dec
16
comment Extending pseudorandom generator by one bit using exclusive-or of previous bits
Alternatively, $\;\;\;$ "$z$'s first $m$ bits" $\: \mapsto \:$ "$z$" $\;\;$ and $\;\;$ "the last bit of $z$" $\: \mapsto \:$ "$0$" $\;\;$. $\;\;\;\;\;\;\;$
Dec
13
revised Verifiable random function basic example
fixed grammar and removed "functional-encryption" tag
Dec
13
comment Is it safe to AES-CBC and AES-CMAC both using the same key?
Having said that, I'm now wondering if maybe your approach is more secure than the usual one. $\hspace{.6 in}$
Dec
13
comment Is it safe to AES-CBC and AES-CMAC both using the same key?
... Just concatenate the IV with the rest of the ciphertext. $\;$
Dec
12
comment Is it safe to AES-CBC and AES-CMAC both using the same key?
Why does IV go into the plaintext? $\;$
Dec
12
comment PRG variant as a commitment scheme
(... continued) $\:$ there are no trusted parties and no trusted strings, the parties are limited to sending bits and qubits to each other (as opposed to, for example, sending tamper-evident seals or physical uncloneable functions or other hardware), and clocks are inaccurate (generally, they can only be used to detect that absence of an expected message). $\;\;\;\;$
Dec
12
comment PRG variant as a commitment scheme
@GuutBoy : $\;\;\;$ That does not "mean we are no longer in the plain model". $\:$ The "plain model" means that all computational limitations are soft (in particular, can't use timed commitments or the bounded storage model), the adversary's only limitations on working with qubits are computational and physical (so no noisy-storage model), $\:$ (continued ...) $\;\;\;\;\;\;\;$