Questions tagged [reference-request]
A reference request is a request to be provided with a source from documentation, official papers, and specs related to one or more specific algorithms or cryptographic procedures. Open ended literature recommendation requests are off topic! Also: Crypto.SE is not an optimal replacement for a search engine. The reference-request tag is not something that provides a base to replace research efforts.
425
questions
2
votes
0
answers
34
views
Does the supposed domain separation make it safe to reuse Ed25519 public key for Curve25519 key establishment?
The "Similar Questions" section under my title suggest several similar questions on this, but none touched on that explicitly.
Because Montgomery curves have birationally equivalent Edwards ...
- 9,672
0
votes
0
answers
67
views
What is the message inflation ratio in ring-LWE?
I've been learning and implementing standard ring-LWE over $R_t = \mathbb{Z}_t[x]/(x^N+1)$ [1]. In my implementation [2] the inflation ratio is ~192 (it takes 192 bytes to encrypt 1 byte). My ...
- 131
1
vote
0
answers
43
views
Noncommutative generalizations of NTRU
I recently learned and implemented NTRU Encrypt successfully in Python/SageMath. The key players are the polynomial rings $R = \mathbb{Z}[x]/(x^N-1)$ and reduction $R_p = \mathbb{Z}_p[x]/(x^N-1)$.
One ...
- 131
-1
votes
1
answer
76
views
Rust implementation of ChaCha20/Poly1305 or AES-GCM that uses GPU?
Do you know of any Rust implementation of ChaCha20/Poly1305 or AES-GCM that uses the GPU (especially CUDA) for encryption?
- 11
2
votes
1
answer
96
views
Number field embeddings for homomorphic encryption
Suppose Alice chooses a number field $K$ and a polynomial $f(x) \in K[x]$. She computes the splitting field $L$ along with an embedding $\varphi: K \rightarrow L$. In SageMath,
...
- 131
1
vote
0
answers
37
views
Vulnerability of key exchange arising from interoperability of implementations
I remember that I read a paper a long time ago that makes a claim of the following kind:
Although TLS (or perhaps another protocol) is secure in theory, different implementations of it could interpret ...
- 278
2
votes
0
answers
68
views
Fully homomorphic encryption textbook suggestion
I am looking for mathematics textbooks which include a rigorous introduction to fully homomorphic encryption and especially CKKS / TFHE algorithms at the level of Boneh and Shoup's A Graduate Course ...
- 171
0
votes
0
answers
75
views
Where is the UltraPLONK paper?
I'm looking for the paper for UltraPLONK, the extension to Turbo PLONK that Aztec released in 2020. I'm seeing references to it in other papers (but with no link to the actual paper) and in social ...
- 31
2
votes
1
answer
94
views
Languages $L$ that have perfect zero-knowledge that do not have any $AM$ proof system that is perfect or zero-knowledge on $L$
In the GMR[85] paper, a conjecture is made in section 3.7:
There exist languages $L$ that have perfect or statistical zero-knowledge proof systems, but do not have any Arthur-Merlin proof system that ...
2
votes
1
answer
74
views
Which was the first cipher that used the Maximum distance separable (MDS) matrix?
MDS matrices are used in the diffusion layer of block ciphers. I am interested in knowing who was the first researcher(s) who used an MDS matrix in their cipher. Thanks in advance.
1
vote
1
answer
60
views
Literature on Batching in FHE
From what I understand, the folklore way to batch Ring-LWE style cipher texts is to use the Chinese remainder theorem. I am wondering if there are any different approaches/optimizations to this style ...
- 27
1
vote
0
answers
43
views
One Way Functions with Non-Uniform Inputs
It is well-known that a One-Way Function is hard to invert on uniformly random inputs. As per Wikipedia,
for [sic] all randomized algorithms $F$, all positive integers $c$ and all sufficiently large $...
2
votes
1
answer
91
views
"intermediate" PRNG
Two popular example dynamical systems for PRNG are
LFSRs, basically the orbit $(x^ks)_{k>0}$ for some non-zero seed $s$ and (primitive) $x$ in $GF(2^n)^{\times}$
CTR_DRBG, say with AES128 and 256-...
- 420
0
votes
0
answers
22
views
Aggregate Signatures Overview
I've been learning about aggregate signatures lately, are there any overviews or learning materials about aggregate signatures (including security properties)?
- 21
4
votes
3
answers
521
views
Citation to original paper by Davies-Meyer on one way compression functions
I see a lot of references to the Davies-Meyer construction for one-way compression functions.
But I can't find any citation to the original paper.
Does anyone have it?
- 41
2
votes
1
answer
280
views
Choosing (key,plain) to produce zero state in middle rounds of AES encrypt
I was told in passing that (key, plain) pairs could be chosen to produce a zero state in AES encrypt in some middle round (say 5). [The application here being to side-channel leakage assessment.] ...
- 420
7
votes
0
answers
365
views
Who invented salt, and why is it called salt?
I'm looking for an authoritative reference about the history of salts in the context of hash functions. Why is the personalization string in a hash function called a "salt"? Who should be ...
- 14.1k
2
votes
1
answer
149
views
Post-quantum EU-CMA security from OWF-only
In the paper: "Universal One-Way Hash Functions and their Cryptographic
Applications". The following is proven: "If 1-1 one-way functions exist, then the one-way based signature scheme ...
- 233
-1
votes
1
answer
537
views
What's the best encryption algorithm for storing files on a server?
I'm making a cloud-based service. So, basically, my users will be able to upload files (any type of files) and they will be uploaded to a server. I am aware that I have two options:
Upload the files ...
- 101
3
votes
1
answer
694
views
On real-time decryption of encrypted radio communications
According to Jack Watling & Nick Reynolds,
Ukrainian officers recalled one incident in which the Russian headquarters gave pre-emptive warning to its units of an artillery strike based on ...
1
vote
1
answer
73
views
Modern proof of Kilian's result that OT is complete for 2PC
I'm looking for a textbook or article that spells out the details of Kilian's paper on the completeness of oblivious transfer for secure two-party function evaluation (2PC). Kilian's paper is in the ...
- 960
1
vote
0
answers
73
views
Authors of "How to explain zero-knowledge Protocols to your children?"
Does anyone know what are the family relationships in the paper "How to Explain Zero-Knowledge Protocols to Your Children"
The authors are: Jean-Jacques Quisquater, Myriam Quisquater, Muriel ...
- 340
1
vote
1
answer
42
views
LWE KEMs and message coding
In many proposed lattice PKE schemes, the plaintext is encoded or modulated in a simple fashion, e.g. using Kyber-ish notation:
key gen: $pk=(A, t=As+e)$, $\quad sk=s\quad$ ($A$ random, $s$, $e$ ...
- 420
3
votes
1
answer
243
views
Why in authenticated encryptions do we need separate keys for cipher and MAC?
As asked, I suppose this must have been answered before, even if not in the form asked here. The most notable AEAD schemes GCM-AES and ChaCha20-Poly1305 do this. Also, even outside AEAD, ad-hoc ...
- 9,672
0
votes
0
answers
50
views
Security assumption: Where is an assumption from (who provides and formalizes it)?
Is there a list of all the (most) assumptions (such as RSA and DDH assumptions) used in cryptography and the corresponding properties?
- 137
3
votes
3
answers
797
views
Reference implementation of Shamir's Secret Sharing
Is there an implementation of Shamir's Secret Sharing that can be regarded as a "canonical" (or "reference" or "standard") implementation, so that I can test other ...
- 133
1
vote
0
answers
91
views
References and Books for the basics
I started studying again recently, I forgot plenty of stuff.
But there are 2 areas that I am really struggling.
The procedures to prove and demonstrate theorems.
The basic math necessary for ...
- 11
2
votes
1
answer
189
views
Info AES cryptanalysis
I have some doubts regarding AES weakness and AES cryptanalysis. While it is relatively simple to find Cryptanalysis info on previous ciphers, I get confused about understanding various types of ...
- 71
2
votes
1
answer
311
views
Security of equal discrete logs (over different bases)
I am trying to find a reduction for the following DLOG problem in generic groups. It is a simple generalization but I'm not finding any reference (the closest being the Chaum-Pedersen signature scheme ...
- 47
3
votes
1
answer
1k
views
How lattices and LWE are connected?
I am a last-year master student in pure mathematics and I am working on my thesis. I am working on a connection between lattice-based encryption and Ring LWE and between Ring LWE and Homomorphic ...
- 85
1
vote
0
answers
219
views
"Add" points that are not on the same elliptic curve?
Assume elliptic curve in Weierstrass form.
$y^2 = x^3 + a x + b$ where $x,y,a,b \in F$
I noticed the point addition formula does not involve parameters $a,b$.
Furthermore, one can always solve for $a,...
- 121
4
votes
1
answer
701
views
Why is this function bijective?
I cannot seem to understand why the function $F$ defined in Theorem 7.1 of the paper “Permutation rotation-symmetric Sboxes, liftings and affine equivalence” is described as “a bijection on $\mathbb{F}...
- 1,367
10
votes
1
answer
602
views
Who is the inventor of the OFB block cipher mode of operation?
Handbook of Applied Cryptography gives two resources for the OFB mode
1980 FIPS 81. This doesn't give any references, unlike NIST.
1983 ANSI X3.106, unfortunately pay-walled.
Who is the inventor of ...
- 49.3k
1
vote
0
answers
1k
views
How to find the 6 main properties of cryptographic hash functions when implementing a hash function?
According to this there are at least 6 "properties" all cryptographically secure hash functions strive to attain:
Deterministic: the same message always results in the same hash;
Quick: it ...
- 171
8
votes
1
answer
211
views
Where did Whitfield Diffie say "If you can make random numbers, you can have a private conversation"?
I've seen the following (alleged) quotation on this site and other places:-
If you can make random numbers, you can have a private conversation.
-Whitfield Diffie.
Yet we (Google & me) can't ...
- 15.7k
1
vote
1
answer
452
views
Baby steps with example, looking for an "AES for Idiots" type of explanation
Countless examples all over on implementation of AES. None of these actually make sense to someone with zero cryptographic or advanced mathematical experience.
This => too abstract & technical.....
- 189
1
vote
0
answers
190
views
Classic secret sharing schemes vs Homomorphic secret sharing schemes
What is the difference between the classic secret sharing schemes that are used in the protocols of Ben-or and Rabin, Ben-Or, M., Goldwasser, S., Wigderson (that is the Shamir's secret sharing scheme) ...
- 279
2
votes
1
answer
454
views
How can I understand the math behind crypto, especially that used in blockchains / distributed ledgers?
A bit of a background about me; Computer Engineer but during my studies I didn't dive too deep into the maths, especially the crypto maths that is used to make the blockchain and cryptography work.
I'...
- 123
0
votes
1
answer
85
views
Where can I find good practice questions for proofs by reduction?
I already have the Katz-Lindell textbook, but I also want some additional practice problems for security reductions for stuff like PRFs, MACs, digital signatures, private and public key schemes, and ...
- 43
0
votes
0
answers
118
views
Homomorphic Encryption Library Supporting Addition, Multiplication & Logical Shift
Does anyone know of a C++ homomorphic encryption library that supports addition, multiplication and logical right shift over integers? Some set of instructions that allows the implementation of ...
- 101
2
votes
0
answers
71
views
Designated verifier signature from Diffie–Hellman and a MAC
Here is an idea for a designated verifier signature scheme. Suppose Alice and Bob know each other’s public keys and Alice wants to send a message to Bob, such that only he will be convinced of its ...
- 206
1
vote
0
answers
83
views
Literature about cryptography and programming on c++ [closed]
I'm interested in learning about cryptography and making something practical out of it - make own cryptocurrency sometime im future.
I think I have good knowlegde of c++, I learned from learncpp.com ...
- 11
0
votes
0
answers
27
views
Looking for a authoritative reference on DER (X.509 etc) encoding standards
I'm writing a paper on parsing DER. DER the canonical sister of BER, when it comes to encoding ASN.1, with emphasis on shortest possible encoding. One of the properties that I seek to assure myself of,...
1
vote
1
answer
1k
views
Step-by-step working out with example input for NIST Hash Functions like SHA-1,SHA-2, and SHA-3
I am working on doing a naive Python implementation of SHA-1,SHA-2, and SHA-3 and I need to test and debug because the hash result right now is not correct.
I have found a step-by-step working out of ...
- 111
2
votes
1
answer
719
views
Clarification of the provable cryptography controversies
I read about the provable cryptography in Wikipedia. The article referred to tense controversies around 2007.
Do these controversies still exist?
What is the substitution for the provable-security? Is ...
- 417
3
votes
2
answers
1k
views
Confusion and diffusion misunderstanding
I am reading the book titled "Algebra for Cryptologists". The author defined the confusion and the diffusion as follows:
Confusion: Confusion is intended to make the relationship between the ...
- 417
-1
votes
1
answer
130
views
Neural Network based on pseudorandom number
Recently, I read this paper NEURAL NETWORK BASED
CRYPTOGRAPHY. Under the section 3.1 it said:
The aim is to improve the randomness of the random numbers generated by any
algorithm using an NN. In ...
- 99
10
votes
2
answers
2k
views
Why cannot I assume that cryptography published in venues/journals handled by the same publishers as prestigious journals is serious?
I do not know if it is allowed to ask this question.
I have been told that "most of the papers on chaos-based cryptography are appearing in fee/generalist journals, whose focus is not security&...
- 417
6
votes
1
answer
324
views
Introduce a reference for cryptanalysis of WhatsApp software
I am studying on cryptanalysis of WhatsApp software. I know this is secure software but I want to present a documentary on this topic as a seminar at the university for applied mathematics students.
...
- 63
1
vote
0
answers
111
views
Coursera Course or book(s) That covers the following subjects: OPENSSL, SSH, PKI, MD5, RSA, Certificates, keys, signatures
I started working as a developper in a cryptography company 3 months ago where the applications are for mostly windows applications. I found that I don't have enough knowledge concerning the topics ...
- 119