All Questions

Let $n$ be a security parameter and $F:\{0,1\}^{\ell_{key}(n)} \times \{0,1\}^{\ell_{in}(n)} \rightarrow \{0,1\}^{\ell_{out}(n)}$ be a keyed function which forms a family of Pseudorandom Functions (...

In other words, in the context of authenticated encryption using Encrypt-Then-MAC, is this stupid?: ...

Is it necessary to pass a ECDH generated key to a KDF? According to the python cryptography documentation, it is stated that For most applications the shared_key should be passed to a key ...

In this thesis chapter 3.1 [1] A multipartite secret sharing scheme is a scheme in which the set of participants is divided into several parts and all participants in the same part play an ...

Having read the basics of mining and this about SHA256 (probabilistic?) partial preimage possible? and SAT solving - An alternative to brute force bitcoin mining, I have the following question: ...

As I concerned the raw CBC-MAC scheme is not secure, and to solve this a final block using a different key is used. Also to fix the "Dummy blocks" generation for the padding in the CBC-MAC a CMAC ...

Given a collision-resistant hash function $H(x)$, and I device another hash function by $H'(x)=\sum^{m}_{1}H(x||i) \mod p$. The summation is defined on finite field of prime order $p$. Is the new ...

I'm doing a search on how windows 10 saves hashed passwords in the SAM file. From this article I suppose that Windows does this: If the password is 123456 and the user has RID 000003E9: CALCULATION ...

The popular VeraCrypt encryption utility, as well as its precursor TrueCrypt, has the option to cascade multiple ciphers on top of each other, such as AES-Twofish-Serpent. It works by cascading three ...

I have understood that it's trivial to reconstruct the internal state of a hasher for many hash functions, if one only knows the output hash. Then, one can append data after the original data and ...

I don't know if the IV in CBC mode is equal in both sides of the encryption and decryption operations. I know that the IV must be unpredictable, but has it to be MACed in the encryption side to be ...

I've been working on the topic of certificates for a little while, and here is what I understand: A certificate is basically a public key + some data about the owner of the certificate + a signature ...

What are the differences between perfect security information-theoretic security semantic security indistinguishability are there other definitions? Do these security definitions depend on the ...

I have a word, SIGURNOSTRACUNARSKIHSISTEMA, and my task is to find a value of a second block using initial permutation DES. Since this is more than 64-bit, I need to use ECB, but I have been unable to ...

In many source codes that implement ECDH, there is a function that multiplies the base point of that curve with a constant. This function usually takes as arguments the constant and just one ...

How is the "Private Key" created in the first place? I understand that once you have your wallet, you will also gain access to your public key and private key... But in order to have a wallet ...

In Ristenpart, Yilek - The Power of Proofs-of-Possession: Securing Multiparty Signatures against Rogue-Key Attacks they have the statement: In general, such proofs of possession (POPs) are clearly ...

I stumbled over this problem when looking at symmetrical block ciphers with a relatively small block size like 32 bit. When I was looking at more common block ciphers with a 64 bit, I learned that ...

I'm looking for an encryption with as small numbers as possible. Given a small group of identities ($G$) (e.g. numbers from $1$ to $N$). Given one entry (or a small number) $e_i$ allows to compute ...

I'm reading about the CVP problem, and all the papers I've read so far handle the case where the CVP matrix and vector are over $R^{n}$ (or over $Z^{n}$), and the distance is a real number. However, ...

I am reverse engineering the firmware of a particular router/modem. I am focusing on the functionality to export the router configuration. I an searching for a way to decrypt the configuration backup ...

As the title says. My reference point for the "pseudorandom ciphertext" concept is this paper by Möller, which introduces a public-key encryption algorithm with this property. I want to know the ...

User A attempts to sell a piece of data D (byte level) to user B at price C through the blockchain. A and B do not trust each other. A worry: After the data D is delivered, B does not complete the ...

I recently learned about a desktop encryption application called ALKEMI, which does not use mathematical encryption according to the website, which I understand to be a misnomer, at best: The ...

I came across this Answer stating (just a line from the answer):- The input space is "infinite" and thus it has an infinite amount of values that will collide into a single hash And in the ...

Suppose I have a big file encrypted using AES (any mode you want) with key kA. I'd like to give an untrusted proxy a kA->kB "conversion key" so that it re-encodes ...

An $m$-dimensional lattice is defined by a basis $A \in \mathbb{R}^{m \times n}$ is the set of points $\{Az : z \in \mathbb{Z}^n\}$. A picture of these points would be like a nice parallelogram kind ...

Sending a signed file from Onsite datacenter to IoT(box) or Linux box using any HSM Linux box will have a signed public key to verify the integrity. We should be able to generate the key pair on any ...

Alice has a pair of RSA keys, the public key is $(n,e)$, the clear text message $M$ and the ciphertext $C=M^e \pmod n$. We suppose that Bob wants to encrypt two successive messages and send them to ...

How to implement modulus switching technique to reduce noise in fully homomorphic encryption scheme?

I am trying to run NIST randomness testing on an Input file having 3645018 bits. I can see that it's giving correct frequencies of Zero's and One's but I am not able to get the results of other test. ...

In the paper on section "4 Proposed Scheme", I suppose that the scheme does not protect if an adversary has access to the $k - 1$ original shares, am I correct? If the adversary has $k - 1$ of both ...

Ramp secret sharing replaces the random coefficients in original Shamir secret sharing with original data to be shared. In such a case, all the coefficients in the polynomial evaluation will be ...

I am seeing a lot of contradictory information on why we now use Wallet Addresses rather than Public Keys. Some say that due to additional level of hashing (double hashing), Wallet addresses are ...

I'm new to cryptography. I know the larger the key size (like 128-bit vs 1024-bit) the harder the ciphertext is to crack, generally. But assuming everything else being equal, does a larger key size ...

I've been reading up on the relationship between private keys and public keys (as well as hashing), and I watched a few videos, but I am still a bit confused. I don't have a programming background, ...

We are developing an e-commerce solution and consider USDT to accept payments. At the moment as I understand we can generate many addresses (1 per transaction) with BIP32 spec approach. Based on Omni ...

Assume that $F:\{0,1\}^{\lambda}\times \{0,1\}^{\lambda}\longrightarrow \{0,1\}^{\lambda}$ is a pseudorandom permutation. How to prove give two different pair $(k_{1},m_{1})$ and $(k_{2},m_{2})$, the ...

I was to send the signed file to the IoT system. How do I use PKI for this? I require to store a private key in HSM.

Is anyone able to cite resources that can be based on choosing a cipher suite? In my case, for a VPN server (OpenVPN) I chose a set of ciphers: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 It provides 128 ...

I am trying to implement ECDH with Botan by using C++. First, I generated two private keys. Yet, I could not handle to make it for public keys. Botan::AutoSeeded_RNG rng; // ec domain and Botan::...

My question refers to EdDSA as specified in RFC 8032. I get from the RFC that ed25519 and ed25519ph are two different instances of EdDSA mainly differing in the fact that that in the case of ...

In the Guarda cryptograph, the password was lost. There is a backup file backup.txt in which the keys are encrypted via AES-256. How to decipher?

Is there a program that automatically inserts the password options in the login field (as long as it selects the right one) using the search method and with the condition of approximate password data ...

In PKI there are different terms to identify certificate authorities in the chains. All terms I know of are as follow: Root Subordinate Super Intermediate I see all terms used interchangeably in the ...

If I would use two different key-agreements e.g. SIDH and ECDH how would I handle these both derived keys? Is there a different between XOR or SHA-256 the two keys? (Would one reduce the level of ...

I have gone through error detection and correction techniques like Hamming codes, and BCH codes require extra parity bits for detection and correction. While sending data, we always seem to introduce ...

Wikipedia lists "Hash function algorithms" within the "Hash function" page. I'm wondering what are the differences and if I can use the terms "hash(ing?) algorithm" and "hash function" interchangeably....

I have a use case, the IoT system sending a signed file to the Datacenter and I have an internal CA to read the corresponding public key to verify the signature on the signed file. I am not sure how ...

Is there a way to force one party to generate a fresh key, such that another party can be convinced that the key was freshly generated, without that party also knowing the key? I'm motivated by a ...