Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top
Cryptography

Top Questions

Ask Question
Active 1 Bountied Hot Week Month
0 votes
1 answer
89 views

Is there any link between group signature and multi-signature

CommunityBot
  • 1
1 vote
1 answer
19 views

If SNARKs generally work in finite fields, how are non integer values handled - say fixed point decimal numbers?

kodlu
  • 18.6k
3 votes
0 answers
64 views

Semantic Security equivalent to Real/Random Semantic Security

Ievgeni
  • 2,499
4 votes
0 answers
65 views

Which lattice-based encryption scheme/signatures is fundamental?

Ievgeni
  • 2,499
2 votes
1 answer
58 views

Elliptic Curve - Is it possible to know whether a particular value is the result of ECadd or ECdouble?

fgrieu♦
  • 131k
4 votes
1 answer
91 views

RSA Key Pair Generation - limit on $e$

fgrieu♦
  • 131k
2 votes
0 answers
9 views

Fusion auth versus jose4j library for jwt using secp256k

Ievgeni
  • 2,499
4 votes
1 answer
42 views

NTRUEncrypt proof that there are plenty of keys

Daniel S
  • 17.1k
1 vote
1 answer
91 views

Is product of two linear combinations over a finite field information hiding?

CommunityBot
  • 1
3 votes
1 answer
143 views

Solving Shamir secret sharing schemes

Mark
  • 9,938
2 votes
1 answer
36 views

A random access machine with lots of random data on its tape is a stronger assumption than the existence of OWFs

Mark
  • 9,938
1 vote
1 answer
14 views

Proving that the length-preserving OWF does not have polynomially bounded cycle

Mark
  • 9,938
7 votes
1 answer
148 views

What is the status of the NIST Lightweight Cryptography Standardisation Process?

kodlu
  • 18.6k
1 vote
1 answer
29 views

How effective is increasing elliptic curve modulo sizes for quantum resistance?

poncho
  • 138k
1 vote
0 answers
19 views

Basic, easily implementable (and small code size) algorithm for validating signature/token

Gavriel
  • 111
2 votes
4 answers
1k views

Cons for stream ciphers that are based on hash functions

Erik Aronesty
  • 406
0 votes
1 answer
118 views

All combinations to a substitution cipher

CommunityBot
  • 1
3 votes
1 answer
303 views

Using YubiKey to store a PIN-protected secret for disk encryption

CommunityBot
  • 1
1 vote
0 answers
14 views

Honest verifier zero knowledge property for this protocol

tonythestark
  • 153
4 votes
2 answers
134 views

Does Quantum Key Distribution (aka: QKD) qualify as "Cryptography"?

Maarten Bodewes♦
  • 88.6k
1 vote
1 answer
68 views

What is the recommended signature message padding for Ed448 in Bouncy Castle?

Rohit Gupta
  • 173
1 vote
1 answer
80 views

Indistinguishability obfuscation and PRFs

CommunityBot
  • 1
1 vote
1 answer
54 views

Is there any attack from a malicious adversary against semi-honest MPC protocol?

CommunityBot
  • 1
2 votes
1 answer
80 views

Differential Privacy with Outliers

CommunityBot
  • 1
1 vote
1 answer
59 views

Does a salted password hash reveal info about the password?

n-l-i
  • 21
0 votes
0 answers
20 views

Sharing encryption key via intermediary without the intermediary having access to the content

amlwwalker
  • 101
9 votes
1 answer
312 views

What does 'a reduction is tight' mean rigorously?

ckamath
  • 4,873
10 votes
1 answer
1k views

Why did OAEP change from PKCS#1 v2.0 and v2.1?

Maarten Bodewes♦
  • 88.6k
2 votes
1 answer
161 views

Range proof for ElGamal ciphertext

Maarten Bodewes♦
  • 88.6k
1 vote
1 answer
49 views

Projective coordinates for Montgomery curves

filippo polidori
  • 1
2 votes
1 answer
63 views

What advantages does FrodoKEM have over other PQCs?

Mark
  • 9,938
3 votes
6 answers
376 views

Understanding why Semantic Security implies Message Recovery Security

AMG
  • 1
4 votes
2 answers
283 views

Deletion complexity in a RSA accumulator

Alin Tomescu
  • 946
1 vote
1 answer
54 views

Hardness of DL in group of Quadratic Residues (product of safe primes)

poncho
  • 138k
4 votes
1 answer
173 views

Basic explanation of Falcon and Dilithium

James
  • 11
2 votes
1 answer
118 views

How do different types of ciphers relate to each other?

CommunityBot
  • 1
0 votes
1 answer
38 views

Signing with symmetric crypto and an arbitrator, question from Applied Cryptography book

Daniel S
  • 17.1k
1 vote
1 answer
166 views

Nonmembership witness in universal accumulator

Alin Tomescu
  • 946
1 vote
0 answers
28 views

Solving DDH from an ElGamal adversary

bs-
  • 63
0 votes
1 answer
74 views

Randomness and authentication on short value outputs (48 bits)

CommunityBot
  • 1
-2 votes
0 answers
24 views

How can a person do dubble spending if computational power is same as target [closed]

Python
  • 1
3 votes
1 answer
131 views

Criteria for choice of prime field in secp256k1?

Samuel Neves
  • 12.1k
1 vote
1 answer
52 views

Is it possible to use AES to produce a private ECC key?

poncho
  • 138k
0 votes
0 answers
35 views

How to get $y_1$ and $y_2$ values from $y^2=x^3+ax+b$ in elliptic curve [migrated]

user93353
  • 2,165
1 vote
1 answer
47 views

Non-pruned accumulators with asymptotic worst space $O(\log_2 n)$, or cheaper?

Alin Tomescu
  • 946
4 votes
1 answer
1k views

One-wayness proof of Elgamal

bs-
  • 63
1 vote
0 answers
74 views

How to find square root of a point on elliptic curve over finite field?

knaccc
  • 4,172

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.