Questions tagged [terminology]

Questions about the meaning and proper use of specific technical terms or notation within cryptography.

Filter by
Sorted by
Tagged with
1
vote
2answers
36 views

Is it fair to say that MACs use a signing algorithm?

The Wikipedia page on MAC calls the algorithm that is used to generate the MAC as a signing algorithm. Is that a fair use of that term? Can we then say that ...
2
votes
2answers
92 views

What is the difference between security parameter and $b$-bit security?

In a previous question, I read ... for $b$-bit security meaning $O(2^b)$ work for an attacker to break the system... While in Katz's Introduction to modern Cryptography, I read: The key-generation ...
1
vote
2answers
45 views

Difference between computationally and perfectly hiding (binding) properties

I am new to Cryptography and has a trouble of understanding the difference between perfect and computationally hiding (binding) properties of a commitment scheme. I also would like to ask what does it ...
0
votes
2answers
31 views

What is the difference between an encryption protocol and an encryption standard?

What is the difference between an encryption protocol and an encryption standard? Am I missing something here? Or are they in fact two different concepts altogether?
3
votes
2answers
130 views

Short term for “Purposely-slowed hash”

When Argon2, Balloon, scrypt, bcrypt¹, PBKDF2… are used for a password, we can call them password hash (for password storage) or password-based key derivation function (for use in encryption). But ...
5
votes
2answers
709 views

What is the difference between data compression and compression in cryptographic algorithms?

What is the differences between data compression as used in e.g. the ZIP protocol and compression as performed in cryptographic hashes? Are there common properties as well, apart from creating a ...
0
votes
0answers
31 views

What does it mean exactly that an adversary can control a polynomial number of parties?

I have an intuitive idea of this, but I am not sure if I am formally interpreting it correctly. In the scenario I am considering, each party is identified by a sequence of $n$ bits and I have $2^{n}$ ...
1
vote
2answers
46 views

Meaning of the term “Key Material”

I am reading specifications from my client that focuses on the topic of security. In these specs, the term key material has appeared many times. I used Google to look for what the term means. ...
0
votes
1answer
60 views

What is the definition of dummy password?

Recently, I try to read some papers about Password Authenticated Key Exchange (PAKE). I can’t understand the meaning of “dummy password .” Can someone gives a concrete definition of it. And what is ...
0
votes
2answers
329 views

is it necessary to write C=E(K,P), Can we write C=E(P,K)?

I just want to know that can we write encryption and decryption formula like $C=E(P,K)$ instead of $C=E(K,P)$
2
votes
1answer
64 views

Is there a term for cryptographic attacks where you can verify decryption without assuming any known structure on the plaintext?

The questions https://security.stackexchange.com/questions/1696/if-someone-breaks-encryption-how-do-they-know-theyre-successful and https://security.stackexchange.com/questions/119887/how-to-know-if-a-...
3
votes
1answer
397 views

What does “crypto_box” actually mean in libsodium and NaCl?

I cannot find what "crypto_box" actually means. In general, and in specific cases, what does "box" do? I know that libsodium is authenticated encryption, but GPG is not. "Box" makes me think the ...
2
votes
1answer
48 views

Meaning of difference Δ delta

I tried to understand some crypto text but I am new to this. Does this: Let $X,X'$ be $\ell$-bit values, and $\Delta X=X\oplus X'$ means that $X$ and $X'$ have $\ell$ bits and $\Delta X=X-X'$ or ...
1
vote
1answer
32 views

Terminology for parties in authentication protocols

Is there a common terminology to designate parties in authentication protocols? For example, we typically use prover and verifier to designate parties with zero-knowledge proofs.
1
vote
1answer
67 views

Confused about terminology in the many flavors of security [closed]

I am learning about cryptography from diverse sources, and I have found terminology a bit confusing. In principle, I understand the difference between the symbolic model and the computational model. ...
6
votes
2answers
156 views

What does the term “differential” in “differential privacy” mean?

I'm new in Differential Privacy (DP) and I have two questions: Why do we have the term differential in differential privacy? Are The local and global differential privacy and global and local ...
6
votes
3answers
188 views

Would creating a custom human language be stronger protection than encrypting a known human language?

There are some languages that people haven't been able to read (Cretan Hieroglyphics for example). Does that mean that you can better protect data by making your own language than by encrypting an ...
1
vote
1answer
72 views

What's the difference between threshold signatures and multisignatures?

I was wondering what's the difference between threshold signatures and multisignatures. In what respects do they differ? For example, is n-out-of-n threshold signature, just a multisignature?
1
vote
1answer
40 views

Difference between Verification and Public Key for Signature Schemes

This is a semantics Question. Typically, in many asymmetric schemes, for this question specifically, digital signatures, we see that designers describe the key given to the verifier as Public Key. ...
5
votes
3answers
643 views

In laymans terms, what exactly is a “One time pad”?

Background I am an undergraduate novice learning about cryptography. Recently my professor introduced us to the concept of a "One time pad". According to my professor: A one time pad is a cipher ...
0
votes
0answers
33 views

Question about terminology of public key encryption in practice

I am asking myself the following question: Say Alice sets all things up so that she is the reciever in an RSA-system. What do you call this "network" now? I hope it is clear what I mean. I ...
0
votes
1answer
44 views

Termonology help: What is using AEAD without encrypting data called?

I'm using ChaCha20-Poly1305 in a "full AEAD" mode, where a payload of data is encrypted and a block of unencrypted "additional data" is secured as well. However, I'd like to also occasionally use the ...
1
vote
1answer
69 views

Is a bit string pseudorandom if it starts with predictable bits?

Assume we have $k = n + m$ bits string $S$ where the first $n$ bits are predictable, and the last $m$ bits are pseudorandom (the HMAC of the first $n$ bits + IV). Can we say $S$ is a pseudorandom ...
1
vote
2answers
117 views

Is obfuscation considered a cryptographic primitive?

The general definition of obfuscation is the process of obscuring a message (not necessarily source code). There is a "rigorous" method for obfuscation (indistinguishability obfuscation, ...
2
votes
1answer
94 views

What is Regular Digest/Hash Function

I was reading a paper, Practical and Provably-Secure Commitment Schemes from Collision-Free Hashing where there was a reference to message digests being 'regular' Here, MD is a message digest. I've ...
5
votes
1answer
146 views

In cryptography, what is “fractionation”?

I understand how fractionation is used in the straddling keyboard, which is an important feature of the VIC Cipher, and in the Polybius Square of the ADFGVX cipher, but I am not sure how to describe ...
2
votes
3answers
188 views

Why is “key-rotation” called key-rotation?

The word "rotate" in respect to "key-rotation" has connotations of looping/repeating variable values like a rotor, but as far as I can tell there isn't a single definition available for "key-rotation" ...
3
votes
2answers
308 views

zk-SNARKs vs. Zk-STARKs vs. Bulletproofs: definitions

I have become quite familiar with Bulletproofs the last few months. Bulletproofs is the name given to a zero-knowledge proof system for arithmetic circuits, by Benedikt Bünz et al. It is a specific ...
1
vote
1answer
54 views

Definition of diffusion matrix

I've been studying this article and since I'm not studying cryptography in English and it is not my native language, I don't understand some of the terminology. More precisely: what are diffusion ...
2
votes
1answer
126 views

What is Reverse Trapdoor Function?

In wikipedia on Digital_signature: but rather, the message to be signed is first hashed to produce a short digest, that is then padded to larger width comparable to N, then signed with the ...
13
votes
7answers
6k views

Can I say “I have encrypted something” if I hash something?

As I understand it, a hashing algorithm is some kind of encryption, just a specific kind of it. So is it wrong to say "I encrypted this value." if I "only" hash it? I understand that it gives the ...
3
votes
0answers
60 views

What is labeled program

I've been studying homomorphic encryption. From their instantiations, i read Labeled Homomorphic Encryption (labHE) scheme 1 where it combines the notion of homomorphic encryption with labeled ...
0
votes
0answers
57 views

DLP instances for given number of congruences

Let $S$ be the set of $k$ congruences of the type $g_{i}^{x_i} \equiv h_i \pmod{n_i}, \quad \forall i,1\leq i \leq k$ What would be the best way to describe such set $S$ with a term in literature. ...
1
vote
2answers
39 views

What is the difference between “asymmetric key cryptosystem” “asymmetric cryptography” terminology?

What is the difference between "asymmetric cryptography" and "asymmetric key cryptosystem" terminology?
6
votes
2answers
244 views

The definition and origin of Schnorr groups?

Wanting to write something on Schnorr groups in a publication I realised how hard it is to find anything citable about them on the internet. Who can help me with the following questions? What (and ...
3
votes
2answers
82 views

What's the meaning of probabilities in differential privacy formula?

I don't understand what does it mean by "The probability is taken is over the coin tosses of K." Does it mean, the probability distribution is generated based on exactly same data but only the ...
5
votes
2answers
442 views

What is cryptographic sealing?

While revising my CAdES library I encountered some "sealing issue" in digital signatures. The Win SDK signtool.exe has a /seal ...
1
vote
1answer
83 views

Asymmetric Encryption - How is the Public Key Being Shared?

I've been reading up on the relationship between private keys and public keys (as well as hashing), and I watched a few videos, but I am still a bit confused. I don't have a programming background, ...
1
vote
1answer
83 views

Difference between hash functions and algorithms?

Wikipedia lists "Hash function algorithms" within the "Hash function" page. I'm wondering what are the differences and if I can use the terms "hash(ing?) algorithm" and "hash function" interchangeably....
0
votes
0answers
35 views

Term for non-ARX symmetric-key cryptographic primitive design strategy

What's the term for describing designing symmetric-key cryptography primitive out of bitwise operations and shifts and rotations? The closest thing I've found is this Keccek team's page calling it ...
2
votes
4answers
328 views

How to use “mod” related words in technical paper?

Modular reduction is a widely used arithmetic operation. I found many "mod" related words such as modulo modulus modular Can anyone explains the difference among these words? Please give examples ...
5
votes
2answers
268 views

Why ``adversary'' and ``challenger'' and what are typical roles of those?

I'm confused with words adversary and challenger, that are used in proof of security of some cryptosystems. For example, adversary and challenger appear in the formal definitions of IND-CPA, IND-CCA, ...
2
votes
3answers
96 views

“Work factor” and “iteration count” nomenclature in adaptive functions

In adaptive functions like PBKDF2 / bcrypt I often read people refer to "iteration count" and others refer to "work factor", and they seem to be used interchangeably (even though they're not - the ...
2
votes
2answers
73 views

What does it mean by 'cost' in CS?

I've seen the word 'cost' being used several times in describing algorithms e.g. algorithm A costs more to compute than algorithm B. What does 'cost' mean in this sense?
1
vote
2answers
621 views

Are ephemeral keys symmetric or asymmetric? [closed]

My question is: Are ephemeral keys symmetric or asymmetric? If symmetric, can ephemeral keys be created based on a (UserID || nonce)?
7
votes
0answers
166 views

What is the origin of the phrase “Don't roll your own crypto”?

The phrase is well-known and widely used, it is often attributed to Bruce Schneier and is indeed relevant to his Schneier's Law. However, I wasn't able to find this specific wording among Schneier's ...
3
votes
1answer
83 views

Are multi move proof protocols still “sigma protocols”?

Conventionally, sigma protocols are defined as being a three-move protocol (1. commit, 2. challenge, 3. response). Reading papers like "Bulletproofs" (Bunz, Bootle, Boneh et al., 2018), it feels like ...
1
vote
1answer
889 views

Mutual Index of Coincidence

I can't seem to find a simple explanation of Mutual Index of Coincidence. I am finding explanations of Mutual Index of Coincidence not Index of Coincidence. I don't understand what the formula below ...
3
votes
1answer
1k views

Difference between decryption and deciphering?

Is there a technical difference between decryption and deciphering?
2
votes
2answers
306 views

Does classifying an integer as a discrete log require it be part of a multiplicative group?

This question is not a question about the discrete log problem, the generalized discrete log problem, or an additive group. The confusion is whether any integer can be considered a discrete log or ...

1
2 3 4 5