Questions tagged [message-recovery]

Message recovery is a feature of some digital signature schemes, whereas some or all of the message signed is embedded in the signature, recovered as part of signature verification, and thus needs not be transmitted.

23 questions
Filter by
Sorted by
Tagged with
69 views

What is the modern terminology for a digital signature scheme with a shadow?

In Guillou and Quisquater's 1988 paper "A 'Paradoxical' Indentity-Based Signature Scheme Resulting from Zero-Knowledge", they say that an RSA identity has a shadow and go on to state that ...
• 2,236
35 views

How to understand the argument “if the adversary outputs x then it queries (a, x) to oracle”？

When I read the work of Dodis et al. ref1, it looks as if I have encountered a simple logical bug. (I'm not concerned with the details of secure proof techniques, but with the logic of reasoning.) In ...
• 1
188 views

Signature check decrypts ciphertext

Can somebody lead me to existing literature on making the extraction of plaintext dependent on a valid signature check first? I didn't think it was possible to force signatures to be checked; but this ...
• 349
1 vote
154 views

What's the Apostrophe or single quote of a variable means in cryptography?

What's the meaning of Apostrophe over a variable in the context conversations of verification? Reference number: https://people.eecs.berkeley.edu/~jfc/'mender/IEEESP02.pdf
• 205
1 vote
97 views

Is asymmetric decryption guessable?

I AM an amateur (for some reason, I have originaly written "I am not"... embarassing, sorry) in cryptography so this might be a very basic question. I am interested to know if there exist ...
• 115
201 views

How to encrypt using private key for ECC

As we know, ECC using $C_2 = r \cdot G, C_1 = M + r \cdot G$; and decrypt with $M=C_1 - K \cdot C_2$. And sign using point $X$: $X = k \cdot G(x_0,y_0)$. \$r = x_0 \cdot K; s = 1 / k \cdot (M + r \cdot ...
107 views

message in mars lander parachute [closed]

I think there's a msg in the parachute of the mars lander , the guy in the vid seems to hint at it I converted this to binary with red=1 and white=0 starting from the three all-red sectors in the top ...
1 vote
537 views

How can RSA be used to compactly sign and encrypt?

How can RSA be used for digital signature with message recovery and encryption, providing transmission of a small message with confidentiality and authentication simultaneously, small cryptogram size, ...
406 views

Understanding why Semantic Security implies Message Recovery Security

I am stuck in the proof where it says $$p_0=\frac{1}{|M|},$$ I just do not understand how we can infer this equality. Also, am I right in understanding that B is defined as choosing his two messages ...
• 131
77 views

An insecure signature with message recovery, Dan Boneh

Someone can help me to resolve this questions from the book of Dan Boneh (University of Standford)
272 views

Elgamal security if same key used twice

Assume that user A sends to user B a message, unencrypted, and signs it with an Elgamal signature. Can some adversary, call it C, who eavesdrops, learn the private key if user A signed both messages ...
3k views

521-bit ECC keys are the same strength as RSA 15,360-bit keys

521 bit ECC uses key sizes 7.5 times smaller than the RSA standard while offering encryption that is magnitudes more secure. An RSA 2048-bit key's secure enough for banking, but a 521-bit ECC key is ...
• 31
1 vote
96 views

Dining-Cryptographer Net (DC-Net) Scheme that Handles Collisions?

[Question edited at the request of Mods] I recently became fascinated with the elegant and simple solution that Chaum proposed for the Dining Cryptographers problem. If you are unfamiliar, please ...
• 23
449 views

In ISO/IEC 9796-2 (signature with message recovery), why are some message representatives bigger than the modulus?

I have implemented signature scheme 2 from ISO/IEC 9796-2 in C using OpenSSL for the underlying crypto operations. To generate the message representative (F in the ...
• 123
657 views

Why ISO/IEC 9796 (signature with message recovery) instead of just encrypt the short message with private key?

I've had a look at “Practical Cryptanalysis of ISO/IEC 9796-2 and EMV Signatures” and read the very good answer https://crypto.stackexchange.com/a/17846/59673 and I understand that signature and ...
• 153
440 views

Build a cipher that is secure against message recovery attack but not semantically secure

I know the definitions of both of the securities (against message recovery and semantic), but I don't know how to actually build a cipher that meets these conditions, I mean, I don't know how to ...
• 427
1 vote
2k views

RC4: Find the complete plain text of a ciphertext when we know part of the plaintext

I need to decrypt an encrypted file with RC4 to answer to a Internet challenge. The file in question is a dump of a Teensy ROM and it is completely encrypted. Luckily, it looks like it's a standard ...
1 vote
421 views

I need help of cryptanalyzing a "bad" RC4 implementation to recover an encrypted text of 13742 bytes. I don't know the key and this implementation does not utilize the drop-n routine. But, I know ...
162 views

Minimizing size of signed message with discrete-log scheme

How can we sign a small message with a discrete-log scheme so as to minimize the size of the whole signed message? Detailed objectives, notation: It is of paramount importance to minimize the total ...
• 132k
1k views

Message-Recovery variant of Ed25519 signature?

What would be a Message-Recovery variant of the Ed25519 signature scheme? Ed25519-MR should be simple to use, fast, with a strong security argument, and striving to stay out of the patent minefield, ...
• 132k
2k views

Forgery attack against Textbook RSA with simple redundancy

I know how to forge vanilla Textbook RSA message signatures (easy). I've learnt that by adding a good redundancy to the message, it cannot be forged anymore. How can one add redundancy so that the ...
• 365
7k views

Description of signatures with message recovery (as in ISO/IEC 9796-2 and EMV Signatures)

I'd like to get an overview of how the signatures with message recovery work, especially in case EMV and other smart card systems. Is there a nice overview available without being required to read the ...
• 433