Questions tagged [reference-request]
A reference request is a request to be provided with a source from documentation, official papers, and specs related to one or more specific algorithms or cryptographic procedures. Open ended literature recommendation requests are off topic! Also: Crypto.SE is not an optimal replacement for a search engine. The reference-request tag is not something that provides a base to replace research efforts.
403
questions
1
vote
1
answer
26
views
LWE KEMs and message coding
In many proposed lattice PKE schemes, the plaintext is encoded or modulated in a simple fashion, e.g. using Kyber-ish notation:
key gen: $pk=(A, t=As+e)$, $\quad sk=s\quad$ ($A$ random, $s$, $e$ ...
- 10.8k
39
votes
1
answer
2k
views
Who first published the interest of more than two prime factors in RSA?
Multi-prime RSA is now a well known technique (described here): it uses $k>2$ distinct secret prime factors in the public RSA modulus, with the advantage that, using the CRT, we can gain a speed ...
- 134k
3
votes
1
answer
109
views
Why in authenticated encryptions do we need separate keys for cipher and MAC?
As asked, I suppose this must have been answered before, even if not in the form asked here. The most notable AEAD schemes GCM-AES and ChaCha20-Poly1305 do this. Also, even outside AEAD, ad-hoc ...
- 134k
13
votes
1
answer
7k
views
Description of signatures with message recovery (as in ISO/IEC 9796-2 and EMV Signatures)
I'd like to get an overview of how the signatures with message recovery work, especially in case EMV and other smart card systems. Is there a nice overview available without being required to read the ...
- 134k
0
votes
0
answers
42
views
Security assumption: Where is an assumption from (who provides and formalizes it)?
Is there a list of all the (most) assumptions (such as RSA and DDH assumptions) used in cryptography and the corresponding properties?
- 8,263
3
votes
3
answers
430
views
Reference implementation of Shamir's Secret Sharing
Is there an implementation of Shamir's Secret Sharing that can be regarded as a "canonical" (or "reference" or "standard") implementation, so that I can test other ...
- 131
8
votes
2
answers
368
views
Where did Martin Hellman acknowledge Ralph Merkle's contribution to public-key cryptography?
I am trying to find the article to reference when discussing the Diffie-Hellman key exchange.
According to Wikipedia Hellman said that
The system...has since become known as Diffie–Hellman key ...
- 161
1
vote
0
answers
46
views
References and Books for the basics
I started studying again recently, I forgot plenty of stuff.
But there are 2 areas that I am really struggling.
The procedures to prove and demonstrate theorems.
The basic math necessary for ...
- 2,543
24
votes
3
answers
2k
views
Selective format-compliant JPEG encryption?
I am working towards building a format-compliant encryption system for pictures. The aim of it is to be able to obscure specific areas of a picture (i.e. faces, car license numbers...) while keeping ...
- 1
2
votes
1
answer
165
views
Info AES cryptanalysis
I have some doubts regarding AES weakness and AES cryptanalysis. While it is relatively simple to find Cryptanalysis info on previous ciphers, I get confused about understanding various types of ...
- 14.9k
7
votes
1
answer
418
views
What's the state of the art attack to get the first pre-image on MD4?
What's the state of the art attack to get the first pre-image on MD4?
Is it still $2^{102}$ as described by
Gaëtan Leurent in "MD4 is Not One-Way" ?
- 73
2
votes
1
answer
302
views
Security of equal discrete logs (over different bases)
I am trying to find a reduction for the following DLOG problem in generic groups. It is a simple generalization but I'm not finding any reference (the closest being the Chaum-Pedersen signature scheme ...
- 20k
4
votes
3
answers
880
views
Comparison: complexity measures vs. security
Assume that you want to compare several cryptographic primitives (say, encryption schemes), and choose one. You need to consider several complexity measures, such as the key length, encryption time, ...
- 450
3
votes
1
answer
180
views
Prove that certain amount of data was stored
I'm looking for a way to prove that a certain amount of data was stored, through some easily verifiable piece of information. Similarly to how proof-of-work can prove through a hash that a certain ...
CommunityBot
- 1
1
vote
1
answer
447
views
How lattices and LWE are connected?
I am a last-year master student in pure mathematics and I am working on my thesis. I am working on a connection between lattice-based encryption and Ring LWE and between Ring LWE and Homomorphic ...
- 211
1
vote
0
answers
156
views
"Add" points that are not on the same elliptic curve?
Assume elliptic curve in Weierstrass form.
$y^2 = x^3 + a x + b$ where $x,y,a,b \in F$
I noticed the point addition formula does not involve parameters $a,b$.
Furthermore, one can always solve for $a,...
- 121
6
votes
3
answers
936
views
Has any alternative to RSA and Discrete Logarithm been standardized for deployment?
Suppose RSA and Discrete Logarithm over any group (including elliptic curves) gets broken tomorrow what other schemes we have for DEPLOYMENT IMMEDIATELY do we have to rescue the internet from collapse?...
- 882
4
votes
1
answer
683
views
Why is this function bijective?
I cannot seem to understand why the function $F$ defined in Theorem 7.1 of the paper “Permutation rotation-symmetric Sboxes, liftings and affine equivalence” is described as “a bijection on $\mathbb{F}...
- 19.9k
1
vote
1
answer
130
views
looking for BKZ earliest algorithm and its application in cryptography
I am reading lattice based cryptography for my master thesis,
I am looking for the earliest version of BKZ algorithm, and its applications in cryptography, to understand it very well, I already know ...
- 8,263
8
votes
1
answer
203
views
Where did Whitfield Diffie say "If you can make random numbers, you can have a private conversation"?
I've seen the following (alleged) quotation on this site and other places:-
If you can make random numbers, you can have a private conversation.
-Whitfield Diffie.
Yet we (Google & me) can't ...
- 3,092
10
votes
1
answer
567
views
Who is the inventor of the OFB block cipher mode of operation?
Handbook of Applied Cryptography gives two resources for the OFB mode
1980 FIPS 81. This doesn't give any references, unlike NIST.
1983 ANSI X3.106, unfortunately pay-walled.
Who is the inventor of ...
- 151
1
vote
0
answers
822
views
How to find the 6 main properties of cryptographic hash functions when implementing a hash function?
According to this there are at least 6 "properties" all cryptographically secure hash functions strive to attain:
Deterministic: the same message always results in the same hash;
Quick: it ...
- 171
1
vote
1
answer
119
views
Baby steps with example, looking for an "AES for Idiots" type of explanation
Countless examples all over on implementation of AES. None of these actually make sense to someone with zero cryptographic or advanced mathematical experience.
This => too abstract & technical.....
- 46k
1
vote
1
answer
534
views
Step-by-step working out with example input for NIST Hash Functions like SHA-1,SHA-2, and SHA-3
I am working on doing a naive Python implementation of SHA-1,SHA-2, and SHA-3 and I need to test and debug because the hash result right now is not correct.
I have found a step-by-step working out of ...
- 46k
19
votes
0
answers
423
views
Adding bit constants to the key schedule to reduce rounds?
Bit constants are often added to the key schedule to reduce slide attacks. I have reviewed David Wagner's work, where he showed that the increased rounds in a Feistel network do not help if you have ...
- 4,524
1
vote
0
answers
120
views
Classic secret sharing schemes vs Homomorphic secret sharing schemes
What is the difference between the classic secret sharing schemes that are used in the protocols of Ben-or and Rabin, Ben-Or, M., Goldwasser, S., Wigderson (that is the Shamir's secret sharing scheme) ...
- 279
2
votes
1
answer
234
views
How can I understand the math behind crypto, especially that used in blockchains / distributed ledgers?
A bit of a background about me; Computer Engineer but during my studies I didn't dive too deep into the maths, especially the crypto maths that is used to make the blockchain and cryptography work.
I'...
- 680
0
votes
1
answer
68
views
Where can I find good practice questions for proofs by reduction?
I already have the Katz-Lindell textbook, but I also want some additional practice problems for security reductions for stuff like PRFs, MACs, digital signatures, private and public key schemes, and ...
- 2,543
5
votes
3
answers
1k
views
Update to "Cryptographic Right Answers"
I'm a big fan of Colin Percival's "Cryptographic Right Answers" post.
This was written in 2009, which is a long time ago in Internet years.
Is the advice still valid or, if not, can someone point me ...
- 121
0
votes
0
answers
80
views
Homomorphic Encryption Library Supporting Addition, Multiplication & Logical Shift
Does anyone know of a C++ homomorphic encryption library that supports addition, multiplication and logical right shift over integers? Some set of instructions that allows the implementation of ...
- 2,543
2
votes
0
answers
54
views
Designated verifier signature from Diffie–Hellman and a MAC
Here is an idea for a designated verifier signature scheme. Suppose Alice and Bob know each other’s public keys and Alice wants to send a message to Bob, such that only he will be convinced of its ...
- 206
2
votes
1
answer
141
views
Constant Time algorithms for $\mathbb{Z}/m\mathbb{Z}$, $\mathbb{Z}/m\mathbb{Z}[x]$, and $\mathbb{Z}/m\mathbb{Z}[x] / (f(x))$?
I want to implement some (lattice based) protocols to better familiarize myself with a programming language (Rust). These tend to do arithmetic over rings like $\mathbb{Z}/m\mathbb{Z}$, or "...
CommunityBot
- 1
1
vote
0
answers
79
views
Literature about cryptography and programming on c++ [closed]
I'm interested in learning about cryptography and making something practical out of it - make own cryptocurrency sometime im future.
I think I have good knowlegde of c++, I learned from learncpp.com ...
- 2,543
10
votes
2
answers
14k
views
Digital Signature using symmetric key cryptography
Generally digital signature is a public key cryptography concept.But it needs high overhead.
So is there any publication or link available where 'digital signature using symmetric key' has been ...
- 46k
0
votes
0
answers
24
views
Looking for a authoritative reference on DER (X.509 etc) encoding standards
I'm writing a paper on parsing DER. DER the canonical sister of BER, when it comes to encoding ASN.1, with emphasis on shortest possible encoding. One of the properties that I seek to assure myself of,...
- 2,543
2
votes
1
answer
686
views
Clarification of the provable cryptography controversies
I read about the provable cryptography in Wikipedia. The article referred to tense controversies around 2007.
Do these controversies still exist?
What is the substitution for the provable-security? Is ...
- 10.8k
3
votes
2
answers
496
views
Confusion and diffusion misunderstanding
I am reading the book titled "Algebra for Cryptologists". The author defined the confusion and the diffusion as follows:
Confusion: Confusion is intended to make the relationship between the ...
- 407
-1
votes
1
answer
88
views
Neural Network based on pseudorandom number
Recently, I read this paper NEURAL NETWORK BASED
CRYPTOGRAPHY. Under the section 3.1 it said:
The aim is to improve the randomness of the random numbers generated by any
algorithm using an NN. In ...
- 36k
10
votes
2
answers
2k
views
Why cannot I assume that cryptography published in venues/journals handled by the same publishers as prestigious journals is serious?
I do not know if it is allowed to ask this question.
I have been told that "most of the papers on chaos-based cryptography are appearing in fee/generalist journals, whose focus is not security&...
- 18.5k
6
votes
1
answer
299
views
Introduce a reference for cryptanalysis of WhatsApp software
I am studying on cryptanalysis of WhatsApp software. I know this is secure software but I want to present a documentary on this topic as a seminar at the university for applied mathematics students.
...
- 63
20
votes
2
answers
32k
views
Does SHA-1024 hash exist?
Does SHA-1024 cryptographic hash function exist similarly to SHA-512? If not, what's the reason for that?
Links:
SHA-2 at Wikipedia
SHA-3 at Wikipedia
- 1
1
vote
0
answers
73
views
Coursera Course or book(s) That covers the following subjects: OPENSSL, SSH, PKI, MD5, RSA, Certificates, keys, signatures
I started working as a developper in a cryptography company 3 months ago where the applications are for mostly windows applications. I found that I don't have enough knowledge concerning the topics ...
- 119
6
votes
2
answers
463
views
Is there an English translation of Vigenère's "Traicté des Chiffres"?
I Googled Vigenère's "Traicté des Chiffres": no English translations, not even a reference to one. Perhaps someone's Google-wu is better than mine; I can't find it.
I'm slogging my way ...
- 3,092
0
votes
2
answers
97
views
How does authentication work differently between asymmetric and symmetric cryptography?
Must Bob and Alice establish a 'connection' before a symmetric or asymmetric encryption scheme is secure? If so, is there ever some expected plaintext whose decryption authenticates the users?
In ...
- 3,092
-1
votes
1
answer
245
views
How to hack pass-protected private RSA key
I know nothing about cryptography.
I must present a completed ASP project to my university that proves I have learned clingo. I have heard that the task of recovering the plaintext private RSA key ...
- 469
1
vote
1
answer
3k
views
AES MixColumns, Predefined Lookup 2D Tables, and Rcon Predefined Lookup 2D Table
I need a copy of the predefined 2D table lookup for AES MixColumns when the state is multiplied by 2 and 3, 9,11,13,14, and the Rcon predefined table. I have searched for them everywhere with no luck. ...
- 3,092
7
votes
0
answers
129
views
Amazon's anti-piracy: how many movies can $m$ conspirators leak?
Is there any existing academic literature about this application of traitor tracing?
A video streaming service has a new anti-piracy technique to identify customers who capture and share their ...
- 988
7
votes
1
answer
1k
views
Opinion from "military institution" about the academic work
A few years ago, I've heard about a harsh report from an American institution (I've forgotten which one, but it was something like the NSA) about IACR conferences. Which report could it be?
I think ...
- 151
3
votes
0
answers
160
views
Is there a source(book, thesis, paper) that explains Lattice basis reduction algorithms (LLL, HKZ) and provides an in depth analysis of the same?
I want to give a slight background about me: I've Bachelors in Computer Engineering and I've been interested in Cryptography since my college days and have been following the field ever since. I'm ...
- 151
2
votes
0
answers
122
views
Detailed running time analysis for Shamir secret sharing scheme
I am successfully working on Shamir's secret sharing scheme for few months. But the only issue I am facing is the calculation of theoretical time complexity.
Since I am from algorithmic background, I ...
- 107