Cryptography

Revival

 Revival
Answer more than 30 days after a question was asked as first answer scoring 2 or more. This badge can be awarded multiple times.
Awarded 950 times.
As a high level intuition, why is LWE without modular reduction easy to solve?
Awarded Nov 23 at 11:56
How to recover y-coordinates when using XZ montgomery curve
Awarded Nov 5 at 11:16
What is Post-Compromise security exactly?
Awarded Oct 24 at 13:25
Theory Question with Enigma
Awarded Oct 9 at 19:43
PCD vs Recursive SNARK vs Non-uniform IVC
Awarded Oct 3 at 15:26
Is CBC mode with a fixed IV secure, if a counter is prepended to the plaintext?
Awarded Sep 27 at 15:01
Secure hashing when the input comes from a small space
Awarded Sep 27 at 11:37
Why the output of G-lattice sampling is spherical in the paper GM18?
Awarded Sep 26 at 4:16
Indistinguishability versus Indifferentiability
Awarded Sep 14 at 10:41
Covering codes for digital signatures
Awarded Aug 16 at 13:30
Is it possible to apply a pseudo-random permutation (a keyed permutation) to construct a sponge function?
Awarded Aug 8 at 3:17
Why does CKKS decryption have approximate correctness?
Awarded Aug 6 at 17:32
How do KDFs work, and what existing implementations exist?
Awarded Aug 6 at 17:32
Proving identity in asymmetrically encrypted communication
Awarded Aug 6 at 7:42
How do encrypted radios perform key exchange?
Awarded Jul 28 at 15:50
RSA-based encryption scheme and random oracle
Awarded Jul 25 at 21:20
Is there a notion of information theoretic one-way function?
Awarded Jul 7 at 17:35
How Cut-and-Choose can leak information?
Awarded Jul 4 at 12:42
Is ECDH(E) Key Exchange FIPS 140-2 compliant?
Awarded Jul 1 at 8:22
Are pedersen hashes of small inputs safe?
Awarded Jun 22 at 17:11
Two problem about noise management of BFV
Awarded Jun 13 at 18:40
Meaning of direction in EPS
Awarded Jun 4 at 4:55
Is it possible to prove that an encrypted message was encrypted with some public key without divulging the plaintext or secret key?
Awarded May 25 at 1:56
Can the CRT speed-up Paillier decryption by more than a factor of two?
Awarded May 23 at 13:15
Can "X3DH" instead of HMQV be used for OPAQUE?
Awarded May 12 at 10:12
Purpose of signing the signed prekey in X3DH?
Awarded May 11 at 3:50
Why is this authenticated Diffie–Hellman key exchange insecure?
Awarded May 11 at 1:40
How can I visually explain M of N encryption (Shamir Key Sharing)?
Awarded May 8 at 0:02
What bitlength should I use for generating primes for a ElGamal Encryption Cyclic Group (given the data to encrypt has a short time-value vector)?
Awarded Apr 21 at 18:08
Is there a cryptographic way (a la mental poker) two people can determine if they both Like each other, without revealing their personal preferences?
Awarded Apr 15 at 0:08
AES-GCM and tag length
Awarded Apr 13 at 1:25
XZ coordinates for Montgomery curves
Awarded Apr 10 at 11:42
How to implement CRS model in the real world?
Awarded Apr 6 at 3:36
Bleichenbacher RSA1024 signature forgery, closed-form solution
Awarded Apr 1 at 17:19
What does the normalizing coefficient do in the Index of Coincidence?
Awarded Mar 31 at 14:25
What do people use non-extractable WebCrypto keys for?
Awarded Mar 31 at 11:27
Who first published the interest of more than two prime factors in RSA?
Awarded Mar 28 at 13:06
Can a device prove the identity of its own code?
Awarded Mar 23 at 2:16
If H(m) = 0 for some m, how can a DSA signature be forged?
Awarded Mar 21 at 16:15
Which is faster, PRF based on AES-CTR and PRF based on BLAKE{2,3}?
Awarded Mar 16 at 12:35
Digital signature and salt
Awarded Mar 16 at 11:34
Does SHA-1 meet the strict avalanche criterion?
Awarded Mar 15 at 14:56
Signal Sender Keys: Why it works and which is the common key at the end?
Awarded Mar 3 at 18:41
Is the signature in PGP compressed as well, or just the contents of the message?
Awarded Feb 24 at 9:33
Combining share decryption on Paillier threshold scheme
Awarded Feb 21 at 5:49
Hashes to passwords with PBKDF2
Awarded Feb 2 at 1:42
Dynamically building a Merkle tree for unkown size
Awarded Jan 25 at 15:11
How to prove that a line belongs to a final hash without knowing/re-hashing all other lines?
Awarded Jan 23 at 11:06
Rsa accumulator storage size
Awarded Jan 23 at 11:06
Proof of membership on a merkle tree
Awarded Jan 23 at 8:52
sequential composition of honest verifier zero knowledge proof
Awarded Jan 22 at 11:21
Can anyone elaborate why KP-ABE is better than CP-ABE for television program broadcasting?
Awarded Jan 17 at 10:36
Will XORing two bad hashes lead to a collision resistant hash?
Awarded Jan 3 at 8:47
Argon2 - memory setting - lower bound?
Awarded Dec 19, 2022 at 23:07
How did G.H. Hardy's work contribute to today's public-key cryptography?
Awarded Dec 18, 2022 at 9:27
MuSig: could the rogue key attack be mitigated by using commitments instead of key transformations?
Awarded Dec 15, 2022 at 18:45
How to construct a circuit in zkSNARK
Awarded Dec 12, 2022 at 0:16
One way shared key encryption with NaCl - is it safe to generate a throwaway keypair for the encrypting party
Awarded Nov 18, 2022 at 15:28
Standard tools for deterministic RSA key generation using seed?
Awarded Nov 18, 2022 at 10:50
Are two keys derived from the same password vulnerable to a related key attack?
Awarded Nov 16, 2022 at 15:07
1
2 3 4 5
…
16

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.