40 questions linked to/from Easy explanation of "IND-" security notions?
83 views

### Why can´t an attacker find the key if he has the plain text, the IV and the ciphertext? [duplicate]

I am reading a book about web security and they are now talking about AES CBC. After reading the chapter I was wondering, can an attacker compute my secret key if he has access to the IV, the plain ...
133 views

### What needs to be proved for a cryptosystem to be secure?

For example showing that it is easy to produce ciphertext from plaintext but is difficult/impossible to get plain text from ciphertext. I am asking in general but am more interested in asymmetric ...
117 views

### For the symmetric-key encryption algorithm, is it possible to use the exponent and modulo to be the keys

For example: Encrypt with: $M^{k_1} \bmod k_2$ where $M$ is message, $k_1$ and $k_2$ are independent keys If it is possible, what is the decryption algorithm? Thanks!
149 views

### algorithmic scheme to compare these two number encrypted using paillier cryptosystem

I have been going through https://eprint.iacr.org/2006/287.pdf (Conjunctive, Subset, and Range Queries on Encrypted Data by Dan boneh) I am trying to implement the paillier system to create a secure ...
86 views

### ECDH, x25519 and limitations for securing client-certificates on the server

g'day Crypto.SE I'm working on a practical application of sharing a static key to better-identify a user, between the recipient (server) and the initiator (client ie. user's machine). My core ...
94 views

### What is the advantage of a probabilistic PKC over a traditional PKC?

While reading through a textbook, I came across the idea of a probabilistic public key cryptosystem, which uses a probabilistic TM to generate the public encryption and private decryption algorithm; ...
118 views

### Formal security-definition reference

Is there a reference where all common formal security-definitions are summarized (such as OW-CPA, IND-CPA, IND-CCA1, IND-CCA2, EUF-CMA and so on)? I need a PUBLISHED reference (paper, book) which ...
79 views

### Modes of operation that simply uses the tweak of a tweakable block cipher

What is the name of the mode in which we simply change the tweak for each block without the need for complex chaining modes? Is this mode secure? Are there any other recommended modes for native ...
We want to choose an asymmetric encryption scheme for use as follows: A device holds its private key, with the corresponding public key known and trusted by all. The device also holds a small $b$-bit ...