Top Questions

0 votes
2 answers
158 views

Is there a quantum-safe password-based authentication method that doesn't require giving the server too much data

0 votes
0 answers
11 views

Enigma machine Rejewski cataluge and ring settings

0 votes
0 answers
32 views

How do I generate a sequence of numbers with unpredictable differences

1 vote
0 answers
44 views

Zero knowledge proof of a linear expression in the exponent [closed]

1 vote
1 answer
48 views

Is it possible to use Diffie-Hellman protocol for symmetric group?

1 vote
0 answers
16 views

Inquiry about the Suitability of Lyapunov Exponents for Image Cryptography

3 votes
2 answers
80 views

Definition of soundness for interactive proof systems

1 vote
1 answer
44 views

Why is zero knowledge defined via simulation w.r.t. inputs *in* the language?

0 votes
0 answers
31 views

Why is perfect secrecy defined under a ciphertext-only threat model?

0 votes
0 answers
43 views

Do one-way functions imply target collision resistance?

0 votes
1 answer
27 views

Is this procedural code correct description of `g is a primitive root module of p`?

2 votes
0 answers
38 views

How does the Functionality know whether a sender/receiver is malicious?

0 votes
0 answers
22 views

Padding oracle attack with known padding length

0 votes
0 answers
24 views

Don Reble's eliptic curve semiprime [closed]

0 votes
0 answers
21 views

Large semiprime factorization [closed]

3 votes
1 answer
553 views

Enumerating the bias of NIST and Pearson randomness extractors

1 vote
0 answers
23 views

Need help with Cryptohack's ProSign 3 ECDSA problem

3 votes
4 answers
678 views

Why Module-LWE and not Ring-LWE?

1 vote
1 answer
135 views

Does using multiple encryption algorithms with different keys on the same cipher text improve security?

2 votes
1 answer
47 views

Proving DES complementation property: y = DES(k,x) ⟹ /y = DES(/k, /x)

1 vote
0 answers
69 views
+150

Security of $E(c,k) = AES(c,(k \oplus c)\cdot (2^{n} - 1 - c)) $ used multiple times with low bit keys $k$. Avoids MitmA?

1 vote
0 answers
23 views

Should not we eliminate $\pm 1$ from $\mathbb{Z}^\times_N$ in RSA accumulators?

8 votes
3 answers
2k views

Reproducing RSA GCD attack (common factor) - real world certificates

3 votes
2 answers
2k views

Where can I download a database of RSA keys?

1 vote
1 answer
39 views

Design a multi party Private Set Intersection protocol with unconditional zero-sharing

0 votes
1 answer
29 views

How can LCG based stream ciphers be broken?

0 votes
1 answer
42 views

How to read libsodium's scalar from integer/bytes or NTL:zz [closed]

2 votes
2 answers
529 views

Is this modification in Merkle-Damgård collision-resistant?

0 votes
0 answers
26 views

I want to find the Zero Value Points on SECP256R1 curve... Is there an alternative to Chien's method of finding roots over large Finite Fields?

0 votes
1 answer
119 views

How to know if a random number is a probable semiprime?

2 votes
2 answers
108 views

Key Exhaustion Risks in Symmetric and Asymmetric Cryptography

0 votes
0 answers
27 views

Reaching the bound of Boneh and Durfee Attack

0 votes
0 answers
33 views

Proving Insecure Hash Function Through Not Collision Resistant

2 votes
1 answer
137 views

Recover Y coordinate from xz elliptic curve multiplication

0 votes
0 answers
51 views

Difficulty of factoring large semiprime N if given a second value y = (p-1)*r, where r is a random large prime?

1 vote
1 answer
78 views

Adaptive corruption in MPC

2 votes
1 answer
419 views

Authentication protocol for communication with Arduino Uno [closed]

0 votes
0 answers
27 views

Key recovery attack on BIP32-Ed25519

0 votes
0 answers
44 views

Row level database encryption scheme

1 vote
0 answers
21 views

Proof of UOWHF construction from a strongly universal hash family

3 votes
1 answer
156 views

Fischlin vs. Fiat-Shamir Performance

0 votes
0 answers
31 views

How to attack the shuffling of correlated numbers?

0 votes
0 answers
26 views

1-0 padding, padded messages of some other message m′according to this padding scheme? [closed]

0 votes
0 answers
24 views

How to implement a SKE scheme supporting single-message multi-ciphertext using LowMC and GMW?

0 votes
0 answers
170 views

Is the cryptography scheme over lattice still secure? [duplicate]

4 votes
1 answer
595 views

perfectly secret with key chosen uniformly

2 votes
1 answer
814 views

Proving that a scheme is $\epsilon$-perfectly secret

0 votes
0 answers
15 views

Reduction For MAC systems


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.