Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our questions

0 votes
1 answer
72 views

Does the ECDSA private or public keys contain data about the signature hash algorithm?

0 votes
0 answers
35 views

Why does Batch RSA signature verification require messages to be different?

2 votes
1 answer
97 views

In Ed25519, why not make both batch & unbatched verification follow the cofactored verification approach rather than unbatched using cofactorless?

-1 votes
3 answers
193 views

Which of the following is a reason to publish files' hashes?

3 votes
2 answers
111 views

Ed25519 - Is there a reason to not trust the signer - i.e. can there be a dishonest signer?

5 votes
3 answers
464 views

When working in a subgroup of EC in EdDSA (especially Ed255190), how is it OK to use operations different from that of the main group?

1 vote
0 answers
58 views

Using a signature as key material

5 votes
1 answer
200 views

How to sign commited group elements?

0 votes
1 answer
49 views

PKCS#7 SignedData - how is the "encryptedDigest" constructed for RSAES‐PKCS‐v1_5?

1 vote
1 answer
60 views

Non-determnistic ECDSA: is there any unique common factor of all signatures of the same message by the same private key?

0 votes
0 answers
16 views

Compiling a ZK-SNARK into a Signature of Knowledge by way of FS/BCS transformations

1 vote
1 answer
79 views

Publicly verify that a a ticket was issued by an authority with around 8 digits

0 votes
2 answers
65 views

Learning RSA: decryption yields inconsistent result after modular arithmetic

2 votes
1 answer
101 views

If a server and I had the possibility to sign the encrypted messages we exchange, would it still be useful to use TLS?

Browse more Questions