Reputation
4,951
Next tag badge:
51/100 score
30/20 answers
Badges
1 6 21
Newest
 Yearling
Impact
~47k people reached

Aug
24
answered Are there any encryption schemes that enable to permute homomorphically?
Aug
20
comment Combining several symmetric ciphers using XOR
crypto.stackexchange.com/q/25733/991 $\;$
Aug
20
comment Is full Homomorphic encryption quantum resistant?
@ChrisPeikert : $\:$ (I realize the paper does say that, but figure I should mention that) I thought all candidate schemes for depth beyond [c*log(n) for a constant c determined during key generation] are "guaranteed to run correctly for" arbitrarily "many evaluations of the group operation". $\;\;\;\;$
Aug
19
comment Small n attack, how it works
Oh, I didn't notice that the description had a -1 instead of a +1. $\:$ In that case, one should consider the effect of Trudy sending back 1 as n. $\;\;\;\;$
Aug
19
comment Small n attack, how it works
To start with, suppose Trudy sends back zero as n. ​ ​
Aug
16
comment Mathematically / statistically “safe” way to differentiate between crypto and random blob?
@Christian : $\:$ No; there is no feasible-length string of zeros that $\hspace{2.37 in}$ "opens the way for you to use encryption later." $\;\;\;\;$
Aug
14
comment Are there simpler FHE methods than Craig Gentry's original paper?
people.csail.mit.edu/vinodv/6892-Fall2013/BGV.pdf $\;$
Aug
12
comment IND-CCA1 RSA padding?
crypto.stackexchange.com/a/312/991 $\;$
Aug
12
comment IND-CCA1 RSA padding?
Can you use the ECDH unit for elGamal? $\;$
Aug
10
comment Factors of the group order to secure against Pohlig-Hellman
It looks like "no" should be replaced with "yes". $\:$ (See the "not" in the question you quoted.) $\hspace{.92 in}$
Aug
10
comment Is it possible to validate a Public Key in RSA?
On the other hand, a large-enough prime $e$ allows one to verify in polynomial time that the core public operation is a permutation. $\;$
Aug
9
comment Factors of the group order to secure against Pohlig-Hellman
research.microsoft.com/en-us/um/people/adum/publications/… $\;$
Aug
8
comment Attacking RSA signature verification that ignores padding
What endianness did you write $M$ in? $\;$
Aug
8
comment How is message length involved in public/private-key encryption?
duckduckgo.com/?q=hybrid+cryptosystem&ia=about $\;$
Aug
8
comment How is message length involved in public/private-key encryption?
Signing is not "taking the private key and encrypting". $\:$ See this answer. $\;\;\;\;$
Aug
8
comment Can convergent encryption be turned into deterministic authenticated encryption with HMAC?
I mean, there would be no feasible way to do it with an ideal MAC, and I don't see any way to utilize HMAC's structure to create an efficient decryption algorithm. $\;$
Aug
6
comment Mathematical formula for switching the key for OTP?
Yes, but, ... why bother switching the key? $\;$
Aug
6
comment Is there a secure source of entropy on a typical microcontroller?
"what constitutes a strong extractor on an mcu" is the same as $\hspace{2.46 in}$ "what constitutes a strong extractor on" anything. $\;$
Aug
4
comment Simulation Based Proof: How the Corrupted Party's Input is Given To Simulator
Yes. ${}{}{}\;$
Aug
3
revised Simulation Based Proof: How the Corrupted Party's Input is Given To Simulator
fixed typo