Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Top Questions

0 votes
1 answer
89 views

Is there any link between group signature and multi-signature

1 vote
1 answer
19 views

If SNARKs generally work in finite fields, how are non integer values handled - say fixed point decimal numbers?

3 votes
0 answers
64 views

Semantic Security equivalent to Real/Random Semantic Security

4 votes
0 answers
65 views

Which lattice-based encryption scheme/signatures is fundamental?

2 votes
1 answer
58 views

Elliptic Curve - Is it possible to know whether a particular value is the result of ECadd or ECdouble?

4 votes
1 answer
91 views

RSA Key Pair Generation - limit on $e$

2 votes
0 answers
9 views

Fusion auth versus jose4j library for jwt using secp256k

4 votes
1 answer
42 views

NTRUEncrypt proof that there are plenty of keys

1 vote
1 answer
91 views

Is product of two linear combinations over a finite field information hiding?

3 votes
1 answer
143 views

Solving Shamir secret sharing schemes

2 votes
1 answer
36 views

A random access machine with lots of random data on its tape is a stronger assumption than the existence of OWFs

1 vote
1 answer
14 views

Proving that the length-preserving OWF does not have polynomially bounded cycle

7 votes
1 answer
148 views

What is the status of the NIST Lightweight Cryptography Standardisation Process?

1 vote
1 answer
29 views

How effective is increasing elliptic curve modulo sizes for quantum resistance?

1 vote
0 answers
19 views

Basic, easily implementable (and small code size) algorithm for validating signature/token

2 votes
4 answers
1k views

Cons for stream ciphers that are based on hash functions

0 votes
1 answer
118 views

All combinations to a substitution cipher

3 votes
1 answer
303 views

Using YubiKey to store a PIN-protected secret for disk encryption

1 vote
0 answers
14 views

Honest verifier zero knowledge property for this protocol

4 votes
2 answers
134 views

Does Quantum Key Distribution (aka: QKD) qualify as "Cryptography"?

1 vote
1 answer
68 views

What is the recommended signature message padding for Ed448 in Bouncy Castle?

1 vote
1 answer
80 views

Indistinguishability obfuscation and PRFs

1 vote
1 answer
54 views

Is there any attack from a malicious adversary against semi-honest MPC protocol?

2 votes
1 answer
80 views

Differential Privacy with Outliers

1 vote
1 answer
59 views

Does a salted password hash reveal info about the password?

0 votes
0 answers
20 views

Sharing encryption key via intermediary without the intermediary having access to the content

9 votes
1 answer
312 views

What does 'a reduction is tight' mean rigorously?

10 votes
1 answer
1k views

Why did OAEP change from PKCS#1 v2.0 and v2.1?

2 votes
1 answer
161 views

Range proof for ElGamal ciphertext

1 vote
1 answer
49 views

Projective coordinates for Montgomery curves

2 votes
1 answer
63 views

What advantages does FrodoKEM have over other PQCs?

3 votes
6 answers
376 views

Understanding why Semantic Security implies Message Recovery Security

4 votes
2 answers
283 views

Deletion complexity in a RSA accumulator

1 vote
1 answer
54 views

Hardness of DL in group of Quadratic Residues (product of safe primes)

4 votes
1 answer
173 views

Basic explanation of Falcon and Dilithium

2 votes
1 answer
118 views

How do different types of ciphers relate to each other?

0 votes
1 answer
38 views

Signing with symmetric crypto and an arbitrator, question from Applied Cryptography book

1 vote
1 answer
166 views

Nonmembership witness in universal accumulator

1 vote
0 answers
28 views

Solving DDH from an ElGamal adversary

0 votes
1 answer
74 views

Randomness and authentication on short value outputs (48 bits)

-2 votes
0 answers
24 views

How can a person do dubble spending if computational power is same as target [closed]

3 votes
1 answer
131 views

Criteria for choice of prime field in secp256k1?

1 vote
1 answer
52 views

Is it possible to use AES to produce a private ECC key?

0 votes
0 answers
35 views

How to get $y_1$ and $y_2$ values from $y^2=x^3+ax+b$ in elliptic curve [migrated]

1 vote
1 answer
47 views

Non-pruned accumulators with asymptotic worst space $O(\log_2 n)$, or cheaper?

4 votes
1 answer
1k views

One-wayness proof of Elgamal

1 vote
0 answers
74 views

How to find square root of a point on elliptic curve over finite field?


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.