All Questions
Tagged with elliptic-curves cryptanalysis
11 questions with no upvoted or accepted answers
7
votes
0
answers
559
views
Which is the smallest safe elliptic curve (bit-length)?
At https://safecurves.cr.yp.to/ some elliptic curves are listed which passed certain security tests. The smallest bit-length of a safe curve listed there is 221 bits.
At wiki page discrete logarithm ...
- 453
6
votes
0
answers
299
views
Index calculus over elliptic curve over function field
According to my understanding there are some pretty solid seeming roadblocks to carrying out an index calculus on an elliptic curve over a finite field. The general strategy is to take points over $E(\...
- 111
5
votes
0
answers
626
views
How the mimc bug from circomlib was safely exploited to fake the merkle root in the witness in practice?
Several years ago, there was an unenforced constraint on verification in the cirmcomlib library : a tool for building projects using ZsNarks. The error allowed to forge cryptographic nullifiers/proofs ...
- 329
4
votes
0
answers
361
views
Encrypt using ECDH with two different EC public keys, minimizing payload size
Let's say Alice has the private EC keys $a$ and $b$, with a base point of prime order $G$. Alice computes the corresponding public keys $A = aG$ and $B = bG$, and sends them to Bob.
Bob now wants to ...
- 141
4
votes
0
answers
619
views
Using the same private key for two ECC key pairs
Let $(d_1,Q_1)$ and $(d_2,Q_2)$ be ECC key pairs over two different elliptic curves (say NIST P-224 and NIST P-256). According to the Elliptic Curve Discrete Logarithm Problem (ECDLP), if the private ...
- 41
2
votes
0
answers
186
views
Security of an Elliptic Curve Public Key with a "Small" x-coordinate
Consider an elliptic curve over a finite field $F_p$ with $p$ prime and order $n$. Let $Q$ be a generator for the field. Given a public key point $P = aQ$, suppose we have an algorithm that finds an ...
- 29
1
vote
0
answers
113
views
Is generating random blake256 hashes until packed points is on the curve, a safe algorithm to avoid the discrete log between the generated points?
I know there’re many questions that ask how to safely HashToCurve, but I want to know if the method I found in an actual implementation is secured against the ...
- 329
1
vote
0
answers
74
views
Is it possible to get the negative point with −x in that version of the Pedersen hash over the BaybyJubJub curve?
The Pedersen hash is a low constraints friendly hash for Zk-Snarks.
Unlike many algorithms, the Pedersen hash returns a point P = (x,y) on a curve as a hash. ...
- 329
1
vote
0
answers
54
views
Preserving location privacy
What are cryptographic techniques that could be used so that if I wanna to enable a server to send message to certain nodes in a network with preserving the privacy location for them ??
- 205
0
votes
0
answers
97
views
Found weil pairing. Index Calculus method on the results of weil pairing
Consider Elliptic curve with p = 59, A = 1, B= 0, P = (25,30) and Q=(35,31).
So I tried to solve this using MOV attack.
The torsion point for them E[5] is R(-25,30i) where is sqroot -1
Chosen two ...
- 121
0
votes
0
answers
508
views
Polynomial Inversion over Galois Field
Hello guys I am looking to calculate the Inverse of a given polynomial in Galois field
I have found the little Fermat's algorithm and the Itoh-Tsujii
I am getting a bit confused with both algorithm ...
- 95