Skip to main content
Cryptography

Student

 Student
First question with score of 1 or more.
Awarded 13734 times.
Can a perfectly secret scheme have non-uniform ciphertext distribution if the plaintext and ciphertext length is equal?
Awarded 23 hours ago
In the DGK Cryptosystem, how hard is it to recover g, if we have knowledge of the private key?
Awarded yesterday
Attempting to simplify Fiege-Fiat-Shamir Identification
Awarded yesterday
The purpose of Enigma plugboard
Awarded yesterday
why there is a need to send iv with cipher text?
Awarded 2 days ago
Coppersmith's Method when you know half of one of the RSA Semprimes [closed]
Awarded Sep 12 at 21:31
Format-Preserving Encryption with FF3 Algorithm - Minimum Length Constraints
Awarded Sep 11 at 20:16
Parallel Composition in UC / CC?
Awarded Sep 11 at 17:57
How do non-Turing complete languages like Clarity support sha256 hashing, which internally relies on loops?
Awarded Sep 11 at 12:38
EC private key check value by ECDH against base point
Awarded Sep 10 at 16:48
Why is the public key included in the private key in Kyber KEM?
Awarded Sep 10 at 9:45
Interpreting LWE reductions bounded by number of samples
Awarded Sep 8 at 18:01
An upper bound for advantage in a security game
Awarded Sep 7 at 19:08
A question about smoothing lemma and proof
Awarded Sep 7 at 19:08
Kyber prime modulus p and base generator g
Awarded Sep 6 at 16:45
How to prove that the following scheme is not necessarily CCA-secure if instantiated with a MAC that is not strongly secure?
Awarded Sep 5 at 23:47
Libsodium: Why hiding the field arithmetics?
Awarded Sep 5 at 14:06
What is the difference between public and private RSA keys? [duplicate]
Awarded Sep 3 at 19:41
Does the TLS_ECDHE_ECDSA_WITH_AES_256_CCM ciphersuite support the sha 384 hash function?
Awarded Sep 2 at 17:24
No inverse of $k^{-1}$ modulo $p-1$ in ElGamal signature scheme
Awarded Sep 2 at 14:53
Why is the standardized ECDSA conversion function projection instead of a hash function?
Awarded Sep 2 at 3:08
Using hash for data integrity and authenticity, how?
Awarded Aug 31 at 20:05
Which hash algorithms support binary input of arbitrary bit length?
Awarded Aug 29 at 23:55
Is Spartan prover time shorter than Groth16?
Awarded Aug 29 at 16:40
Cryptopals 2-11: ECB/CBC Detection Oracle is it possible to be completely accurate?
Awarded Aug 28 at 8:49
Noise flooding in Lattices
Awarded Aug 27 at 14:55
Discrete log in Galois Extension Field
Awarded Aug 27 at 11:48
E2EE Group message encryption
Awarded Aug 27 at 6:12
In lattice, does converting a "bad" basis to a "good" basis constitute a hard problem?
Awarded Aug 27 at 6:05
Device Fingerprinting
Awarded Aug 26 at 20:22
Using a single key pair for man-in-the-middle attack on Diffie-Hellman
Awarded Aug 25 at 18:19
What exactly is a VRF?
Awarded Aug 25 at 1:32
What is the difference between PLWE (Polynomial Learning with Errors) and RLWE (Ring Learning with Errors)？ [closed]
Awarded Aug 23 at 7:55
Public Disclosure of Group Secret Hash in P2P CAS System
Awarded Aug 23 at 1:47
Can we decompose two separable security notions?
Awarded Aug 22 at 19:07
Modifying counter sequence in CTR mode of operation to mitigate IV+Nonce near collision
Awarded Aug 21 at 5:11
Are hash functions with a security of 128 bits quantum-safe? [duplicate]
Awarded Aug 20 at 3:18
Understanding Adversary's Advantage for Target Key Recovery in Ideal Cipher Model
Awarded Aug 19 at 17:11
British War Office/ Military Intelligence Secret Code Use in the North Russian Allied Intervention 1919-1920
Awarded Aug 18 at 16:35
Defending MITM attacks during key exchange
Awarded Aug 18 at 11:22
Visibility of oracle queries in the Indifferentiability model
Awarded Aug 18 at 4:56
Designing a Simple Custom Encryption Algorithm for Messaging: Introducing the "MessageMix Cipher" [closed]
Awarded Aug 18 at 1:30
How to proof that G is a PRG? [closed]
Awarded Aug 18 at 1:30
Is EC_POINT_is_on_curve a necessary check when using EC_POINT_mul in openssl?
Awarded Aug 16 at 22:34
Is there a perfect hash function for a tree data structure with different kinds of nodes?
Awarded Aug 16 at 17:48
Bits of security vs collision resistance?
Awarded Aug 16 at 7:33
Relationship between $\log(\kappa)$ and $\log(n)$, and round complexity
Awarded Aug 15 at 14:17
How can I demonstrate the existence of such an isomorphism(look at the image below)?
Awarded Aug 14 at 4:44
What does the $\pi_r^{-1}$ notation mean in the Frobenius Map in CKKS Scheme?
Awarded Aug 13 at 19:16
How to find N and e knowing that e = p and N = p*q?
Awarded Aug 13 at 8:10
SHA256 - alternative algorithm to receive same hash?
Awarded Aug 12 at 23:37
A question about partial proof in RSA CTF problems
Awarded Aug 11 at 9:50
Prove that learning PRG image of a DL doesn't help compute that DL
Awarded Aug 11 at 7:00
Miller-Rabin primality test strong liar probability
Awarded Aug 11 at 4:11
How do lattice based LWE protocols match their keys after generating them?
Awarded Aug 11 at 1:12
ADFS SAML token digest validation failing
Awarded Aug 9 at 17:06
Are Java PKCS #12 key stores reasonably secure with average strength passwords?
Awarded Aug 7 at 20:48
Why we use a fixed inverse Multiplication Matrix in AES
Awarded Aug 6 at 3:04
Playing safe when shortening up public key hashes
Awarded Aug 5 at 23:10
What would the cryptographic strength of 3DES-squared be?
Awarded Aug 4 at 18:35
1
2 3 4 5
…
229