Questions tagged [reference-request]

A reference request is a request to be provided with a source from documentation, official papers, and specs related to one or more specific algorithms or cryptographic procedures. Open ended literature recommendation requests are off topic! Also: Crypto.SE is not an optimal replacement for a search engine. The reference-request tag is not something that provides a base to replace research efforts.

Filter by
Sorted by
Tagged with
0 votes
0 answers
15 views

Aggregate Signatures Overview

I've been learning about aggregate signatures lately, are there any overviews or learning materials about aggregate signatures (including security properties)?
Ping Ping's user avatar
4 votes
2 answers
495 views

Citation to original paper by Davies-Meyer on one way compression functions

I see a lot of references to the Davies-Meyer construction for one-way compression functions. But I can't find any citation to the original paper. Does anyone have it?
Bert's user avatar
  • 41
2 votes
1 answer
275 views

Choosing (key,plain) to produce zero state in middle rounds of AES encrypt

I was told in passing that (key, plain) pairs could be chosen to produce a zero state in AES encrypt in some middle round (say 5). [The application here being to side-channel leakage assessment.] ...
yoyo's user avatar
  • 391
7 votes
0 answers
189 views

Who invented salt, and why is it called salt?

I'm looking for an authoritative reference about the history of salts in the context of hash functions. Why is the personalization string in a hash function called a "salt"? Who should be ...
Mikero's user avatar
  • 12.5k
2 votes
1 answer
123 views

Post-quantum EU-CMA security from OWF-only

In the paper: "Universal One-Way Hash Functions and their Cryptographic Applications". The following is proven: "If 1-1 one-way functions exist, then the one-way based signature scheme ...
Ilk's user avatar
  • 233
-1 votes
1 answer
176 views

What's the best encryption algorithm for storing files on a server?

I'm making a cloud-based service. So, basically, my users will be able to upload files (any type of files) and they will be uploaded to a server. I am aware that I have two options: Upload the files ...
Gaurav Mall's user avatar
3 votes
1 answer
318 views

On real-time decryption of encrypted radio communications

According to Jack Watling & Nick Reynolds, Ukrainian officers recalled one incident in which the Russian headquarters gave pre-emptive warning to its units of an artillery strike based on ...
Rodrigo de Azevedo's user avatar
1 vote
1 answer
56 views

Modern proof of Kilian's result that OT is complete for 2PC

I'm looking for a textbook or article that spells out the details of Kilian's paper on the completeness of oblivious transfer for secure two-party function evaluation (2PC). Kilian's paper is in the ...
lamontap's user avatar
  • 774
1 vote
0 answers
60 views

Authors of "How to explain zero-knowledge Protocols to your children?"

Does anyone know what are the family relationships in the paper "How to Explain Zero-Knowledge Protocols to Your Children" The authors are: Jean-Jacques Quisquater, Myriam Quisquater, Muriel ...
Alex Them's user avatar
1 vote
1 answer
36 views

LWE KEMs and message coding

In many proposed lattice PKE schemes, the plaintext is encoded or modulated in a simple fashion, e.g. using Kyber-ish notation: key gen: $pk=(A, t=As+e)$, $\quad sk=s\quad$ ($A$ random, $s$, $e$ ...
yoyo's user avatar
  • 391
3 votes
1 answer
157 views

Why in authenticated encryptions do we need separate keys for cipher and MAC?

As asked, I suppose this must have been answered before, even if not in the form asked here. The most notable AEAD schemes GCM-AES and ChaCha20-Poly1305 do this. Also, even outside AEAD, ad-hoc ...
DannyNiu's user avatar
  • 9,080
0 votes
0 answers
49 views

Security assumption: Where is an assumption from (who provides and formalizes it)?

Is there a list of all the (most) assumptions (such as RSA and DDH assumptions) used in cryptography and the corresponding properties?
Jeffrey's user avatar
  • 85
3 votes
3 answers
597 views

Reference implementation of Shamir's Secret Sharing

Is there an implementation of Shamir's Secret Sharing that can be regarded as a "canonical" (or "reference" or "standard") implementation, so that I can test other ...
Georg's user avatar
  • 133
1 vote
0 answers
74 views

References and Books for the basics

I started studying again recently, I forgot plenty of stuff. But there are 2 areas that I am really struggling. The procedures to prove and demonstrate theorems. The basic math necessary for ...
Alec Holland's user avatar
2 votes
1 answer
179 views

Info AES cryptanalysis

I have some doubts regarding AES weakness and AES cryptanalysis. While it is relatively simple to find Cryptanalysis info on previous ciphers, I get confused about understanding various types of ...
LianoQ's user avatar
  • 71
2 votes
1 answer
309 views

Security of equal discrete logs (over different bases)

I am trying to find a reduction for the following DLOG problem in generic groups. It is a simple generalization but I'm not finding any reference (the closest being the Chaum-Pedersen signature scheme ...
crypcrypcryp's user avatar
1 vote
1 answer
864 views

How lattices and LWE are connected?

I am a last-year master student in pure mathematics and I am working on my thesis. I am working on a connection between lattice-based encryption and Ring LWE and between Ring LWE and Homomorphic ...
Kate Jns's user avatar
1 vote
0 answers
197 views

"Add" points that are not on the same elliptic curve?

Assume elliptic curve in Weierstrass form. $y^2 = x^3 + a x + b$ where $x,y,a,b \in F$ I noticed the point addition formula does not involve parameters $a,b$. Furthermore, one can always solve for $a,...
Kh40tiK's user avatar
  • 121
4 votes
1 answer
696 views

Why is this function bijective?

I cannot seem to understand why the function $F$ defined in Theorem 7.1 of the paper “Permutation rotation-symmetric Sboxes, liftings and affine equivalence” is described as “a bijection on $\mathbb{F}...
lyrically wicked's user avatar
10 votes
1 answer
590 views

Who is the inventor of the OFB block cipher mode of operation?

Handbook of Applied Cryptography gives two resources for the OFB mode 1980 FIPS 81. This doesn't give any references, unlike NIST. 1983 ANSI X3.106, unfortunately pay-walled. Who is the inventor of ...
kelalaka's user avatar
  • 48.3k
1 vote
0 answers
1k views

How to find the 6 main properties of cryptographic hash functions when implementing a hash function?

According to this there are at least 6 "properties" all cryptographically secure hash functions strive to attain: Deterministic: the same message always results in the same hash; Quick: it ...
Lance's user avatar
  • 171
8 votes
1 answer
208 views

Where did Whitfield Diffie say "If you can make random numbers, you can have a private conversation"?

I've seen the following (alleged) quotation on this site and other places:- If you can make random numbers, you can have a private conversation. -Whitfield Diffie. Yet we (Google & me) can't ...
Paul Uszak's user avatar
  • 15.3k
1 vote
1 answer
218 views

Baby steps with example, looking for an "AES for Idiots" type of explanation

Countless examples all over on implementation of AES. None of these actually make sense to someone with zero cryptographic or advanced mathematical experience. This => too abstract & technical.....
RobbB's user avatar
  • 189
1 vote
0 answers
165 views

Classic secret sharing schemes vs Homomorphic secret sharing schemes

What is the difference between the classic secret sharing schemes that are used in the protocols of Ben-or and Rabin, Ben-Or, M., Goldwasser, S., Wigderson (that is the Shamir's secret sharing scheme) ...
Hunger Learn's user avatar
2 votes
1 answer
303 views

How can I understand the math behind crypto, especially that used in blockchains / distributed ledgers?

A bit of a background about me; Computer Engineer but during my studies I didn't dive too deep into the maths, especially the crypto maths that is used to make the blockchain and cryptography work. I'...
Muhammad Yasir's user avatar
0 votes
1 answer
79 views

Where can I find good practice questions for proofs by reduction?

I already have the Katz-Lindell textbook, but I also want some additional practice problems for security reductions for stuff like PRFs, MACs, digital signatures, private and public key schemes, and ...
ness64's user avatar
  • 43
0 votes
0 answers
91 views

Homomorphic Encryption Library Supporting Addition, Multiplication & Logical Shift

Does anyone know of a C++ homomorphic encryption library that supports addition, multiplication and logical right shift over integers? Some set of instructions that allows the implementation of ...
Sam's user avatar
  • 101
2 votes
0 answers
61 views

Designated verifier signature from Diffie–Hellman and a MAC

Here is an idea for a designated verifier signature scheme. Suppose Alice and Bob know each other’s public keys and Alice wants to send a message to Bob, such that only he will be convinced of its ...
kirelagin's user avatar
  • 206
1 vote
0 answers
82 views

Literature about cryptography and programming on c++ [closed]

I'm interested in learning about cryptography and making something practical out of it - make own cryptocurrency sometime im future. I think I have good knowlegde of c++, I learned from learncpp.com ...
noname123's user avatar
0 votes
0 answers
27 views

Looking for a authoritative reference on DER (X.509 etc) encoding standards

I'm writing a paper on parsing DER. DER the canonical sister of BER, when it comes to encoding ASN.1, with emphasis on shortest possible encoding. One of the properties that I seek to assure myself of,...
Kees-Jan Hermans's user avatar
1 vote
1 answer
869 views

Step-by-step working out with example input for NIST Hash Functions like SHA-1,SHA-2, and SHA-3

I am working on doing a naive Python implementation of SHA-1,SHA-2, and SHA-3 and I need to test and debug because the hash result right now is not correct. I have found a step-by-step working out of ...
arunkumaraqm's user avatar
2 votes
1 answer
707 views

Clarification of the provable cryptography controversies

I read about the provable cryptography in Wikipedia. The article referred to tense controversies around 2007. Do these controversies still exist? What is the substitution for the provable-security? Is ...
Crypt01's user avatar
  • 407
3 votes
2 answers
824 views

Confusion and diffusion misunderstanding

I am reading the book titled "Algebra for Cryptologists". The author defined the confusion and the diffusion as follows: Confusion: Confusion is intended to make the relationship between the ...
Crypt01's user avatar
  • 407
-1 votes
1 answer
107 views

Neural Network based on pseudorandom number

Recently, I read this paper NEURAL NETWORK BASED CRYPTOGRAPHY. Under the section 3.1 it said: The aim is to improve the randomness of the random numbers generated by any algorithm using an NN. In ...
emonhossain's user avatar
10 votes
2 answers
2k views

Why cannot I assume that cryptography published in venues/journals handled by the same publishers as prestigious journals is serious?

I do not know if it is allowed to ask this question. I have been told that "most of the papers on chaos-based cryptography are appearing in fee/generalist journals, whose focus is not security&...
Crypt01's user avatar
  • 407
6 votes
1 answer
308 views

Introduce a reference for cryptanalysis of WhatsApp software

I am studying on cryptanalysis of WhatsApp software. I know this is secure software but I want to present a documentary on this topic as a seminar at the university for applied mathematics students. ...
user3571's user avatar
1 vote
0 answers
91 views

Coursera Course or book(s) That covers the following subjects: OPENSSL, SSH, PKI, MD5, RSA, Certificates, keys, signatures

I started working as a developper in a cryptography company 3 months ago where the applications are for mostly windows applications. I found that I don't have enough knowledge concerning the topics ...
Hani Gotc's user avatar
  • 119
-1 votes
1 answer
319 views

How to hack pass-protected private RSA key

I know nothing about cryptography. I must present a completed ASP project to my university that proves I have learned clingo. I have heard that the task of recovering the plaintext private RSA key ...
Vorac's user avatar
  • 107
7 votes
1 answer
1k views

Opinion from "military institution" about the academic work

A few years ago, I've heard about a harsh report from an American institution (I've forgotten which one, but it was something like the NSA) about IACR conferences. Which report could it be? I think ...
Ievgeni's user avatar
  • 2,575
2 votes
0 answers
143 views

Detailed running time analysis for Shamir secret sharing scheme

I am successfully working on Shamir's secret sharing scheme for few months. But the only issue I am facing is the calculation of theoretical time complexity. Since I am from algorithmic background, I ...
Fateh's user avatar
  • 107
7 votes
0 answers
133 views

Amazon's anti-piracy: how many movies can $m$ conspirators leak?

Is there any existing academic literature about this application of traitor tracing? A video streaming service has a new anti-piracy technique to identify customers who capture and share their ...
JamesTheAwesomeDude's user avatar
2 votes
0 answers
41 views

Does anybody have test vectors for the LBlock block cipher?

LBlock is a lightweight block cipher with 64-80 bits block-key size, designed by a group of Chinese scholars. Does anybody have LBlock test vectors? I am looking for test vectors, which contain the ...
nari's user avatar
  • 21
2 votes
1 answer
511 views

Some information about zero knowledge proofs

How do I start studying Zero-Knowledge proofs? What are some good books and entry-level research papers on that topic? What are some prerequisites of the same?
user464732838's user avatar
3 votes
0 answers
212 views

Is there a source(book, thesis, paper) that explains Lattice basis reduction algorithms (LLL, HKZ) and provides an in depth analysis of the same?

I want to give a slight background about me: I've Bachelors in Computer Engineering and I've been interested in Cryptography since my college days and have been following the field ever since. I'm ...
mostlycryptic's user avatar
1 vote
1 answer
142 views

looking for BKZ earliest algorithm and its application in cryptography

I am reading lattice based cryptography for my master thesis, I am looking for the earliest version of BKZ algorithm, and its applications in cryptography, to understand it very well, I already know ...
Don Freecs's user avatar
1 vote
0 answers
95 views

References on lattice-based cryptography [duplicate]

I need earlier references (books, articles, etc) on lattice-based cryptography, and any advice will be helpful to me. I am reading Stinson & Paterson's Cryptography: theory and practice. Thanks in ...
Don Freecs's user avatar
4 votes
0 answers
318 views

Cryptomania and NP $\cap$ co-NP

Cryptomania is usually presented as the Impagliazzo's world, which gives us public-key cryptography under the assumption that trapdoor OWFs exist. For purposes of constructing public-key cryptography ...
Ilk's user avatar
  • 233
3 votes
0 answers
141 views

What is the Indexed Code Book Mode?

While reading specsheets for NXP processors (example mention in this PDF) the other day I saw the mention of the Indexed Code Book mode (ICB) for their AES acceleration hardware - the only mode they ...
SEJPM's user avatar
  • 45.9k
1 vote
0 answers
38 views

Threshold signature verified by an equivalent key

I am looking for references for the following problem: Consider we have a DSA with the keypair $(sk, pk)$ and a message $m$, such that its signature is $s = sig(m,sk)$ and the verification result is $...
user87152's user avatar
2 votes
2 answers
54 views

What is $z_b$ in this introduction to Private Information Retrieval?

I was trying to read this introduction to private information retrieval. On page 12 of the document, a scheme for 1-DB private information retrieval is discussed. I was unable to understand one of the ...
Sidharth Ghoshal's user avatar

1
2 3 4 5
9