Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our Questions

5 votes
1 answer
183 views

How to sign commited group elements?

1 vote
1 answer
32 views

Classical vs Quantum-Safe Algorithms and Protocols / Application Approach

17 votes
1 answer
3k views

Using a single Ed25519 key for encryption and signature

1 vote
1 answer
58 views

Publicly verify that a a ticket was issued by an authority with around 8 digits

9 votes
3 answers
2k views

Why don't crypto-currencies use the Lamport signature scheme?

2 votes
1 answer
66 views

How does the KeyGen of Merkle's improvement of Lamport's OTS work?

0 votes
0 answers
10 views

Relation between oblivious linear function evaluation(OLE) can be used to build a PSI protocol

0 votes
0 answers
12 views

What non-trivial benefit does including a "context"/"signer info" provide in SM2-DSS and EdDSA?

3 votes
3 answers
590 views

How can we prevent duplicate key attacks on digital signatures

4 votes
2 answers
627 views

Performance comparison between ECDSA and BLS signature schemes

2 votes
0 answers
73 views

Quantitative security of signature scheme obtained by Fiat-Shamir tranform

1 vote
2 answers
108 views

Digital signature forgery

2 votes
1 answer
72 views

Lamport Diffie One-time Signature

2 votes
1 answer
111 views

kleptography SETUP attack in ecdsa

Browse more Questions