Questions tagged [terminology]

Questions about the meaning and proper use of specific technical terms or notation within cryptography.

28 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
10 votes
0 answers
635 views

What is the origin of the phrase "Don't roll your own crypto"?

The phrase is well-known and widely used, it is often attributed to Bruce Schneier and is indeed relevant to his Schneier's Law. However, I wasn't able to find this specific wording among Schneier's ...
rkiyanchuk's user avatar
5 votes
0 answers
190 views

Explanation of the term "view" for algorithm or adversary

What is the view of an algorithm/adversary? Is view just a term used to describe the output over a set of inputs for a probabilistic algorithm? For example: Consider experiment Mac-forgeA,Π (n). ...
Nebulous Ryan's user avatar
4 votes
0 answers
113 views

What is "entropic security"?

I've come across a form of cryptographic security that I've never heard of: entropic security. I've read the Russel et al abstract and that doesn't seem to bear much relation to the wiki article. ...
Paul Uszak's user avatar
  • 15.3k
4 votes
0 answers
87 views

"Electronic signature" legal definition

A proposed California law contains the following definition: (i) “Electronic signature” means an electronic sound, symbol, or process attached to or logically associated with an electronic record and ...
Gerard Ashton's user avatar
4 votes
0 answers
451 views

Hash Function Properties

What I am trying to understand is shown in all three properties of a secure hash function, I will focus on Preimage attack resistance. Preimage resistance: given a hash h, it's difficult to find m s.t....
Antonis Paragas's user avatar
4 votes
0 answers
222 views

Security of stream cipher based on Matrix multiplication GF(256) with randomized padding

The actual question is stated at the end of the text. Suppose you have a (grossly inefficient) confidentiality stream cipher with the following components: The keyed function $F_k:\{0,1\}^{8n}\mapsto\...
Henrick Hellström's user avatar
3 votes
0 answers
168 views

Use of term "Commitment"

As an amateur, my first encounter with commitments has been in the form of an hash of the committed value, then I have learnt about seeding the hash as blinding technique. Going on I have discovered ...
baro77's user avatar
  • 720
3 votes
0 answers
64 views

What is the fundamental difference between multipartite and multilevel secret sharing?

According to this paper , Multipartite secret sharing scheme is a scheme in which the set of participants is divided into disjoint parts and all participants in the same part play an equivalent role ...
Natwar's user avatar
  • 441
3 votes
0 answers
75 views

What is labeled program

I've been studying homomorphic encryption. From their instantiations, i read Labeled Homomorphic Encryption (labHE) scheme 1 where it combines the notion of homomorphic encryption with labeled ...
kawsaw's user avatar
  • 115
3 votes
0 answers
243 views

Explanation of part of a visual cryptography algorithm

I have been working on a project involving visual cryptography and I am stuck with the following problem. My question is related to this paper, AN IMPROVED VISUAL CRYPTOGRAPHY SCHEME FOR SECRET ...
user avatar
3 votes
0 answers
1k views

What does “nonlinear mapping” mean?

Page 15 of the Keccak reference (PDF) explains that the $Chi$ step mapping of the Keccak-f permutation in Keccak is defined to be “nonlinear mapping”. Without this, the complete permutation would be ...
Burak's user avatar
  • 183
2 votes
1 answer
63 views

Definition of Dual Lattice: $\vec{v}\in span_{\mathbb{R}}(\mathcal{L}(\mathbf{B}))$

Consider the definition of the dual lattice for a lattice $\mathcal{L}(\mathbf{B}_{m\times n})\in\mathbb{R}^{m}$ where $\mathbf{B}\in\mathbb{R}^{m\times n}$ and $n\leq m$ [sp2 Seminar, Luxembourg 2019,...
user1035648's user avatar
2 votes
0 answers
39 views

Which one is more general, attribute based encryption or inner product predicate encryption?

If we have a scheme for inner product predicate encryption (IPPE), then can we claim that we already have designed an attribute based encryption (ABE) scheme; So we do not need to design an ABE again. ...
user1035648's user avatar
2 votes
0 answers
47 views

What is the difference between Solution-Verification and Challenge-Response variants of Proof of Work;

Sorry if question is really dumb, I am new to crypto :( If the client provides the solution for the PoW Challenge-Response, in my understanding, the solution of that challenge should be verified. So I ...
Van Altercolt's user avatar
2 votes
0 answers
78 views

Asymmetric encryption property required in an authentication protocol

We want to choose an asymmetric encryption scheme for use as follows: A device holds its private key, with the corresponding public key known and trusted by all. The device also holds a small $b$-bit ...
fgrieu's user avatar
  • 140k
2 votes
0 answers
115 views

Formal taxonomy for cryptographic vulnerabilities

There are several areas in which cryptographic vulnerabilities can be introduced. Length extension attacks are inherent to hash functions using Merkle–Damgård. Heartbleed was a vulnerability caused ...
Cybergibbons's user avatar
2 votes
0 answers
112 views

What's the meaning of "Ops" in this ABE schemes performance form?

I am a Ph.D. student focusing on Attribute-Based Encryption, and now I'm reading the paper "Outsourcing the Decryption of ABE Ciphertexts", seen in Figure 1 below. It gives a summary of an ABE scheme ...
Rocky's user avatar
  • 21
1 vote
0 answers
83 views

Pseudo random generator notation

So I'm reading this article where they talk shortly about pseudo random generators where I'm not quite familiar with some of the notation. They call $\lambda$ the security parameter. "...
StackExchangeMMH's user avatar
1 vote
0 answers
68 views

name/acronym/abbreviation explanation for hashes

(Cryptographically and hash/checksum wise consider me a rookie, as I'm rather just using algorithms.) While there are many names, not all of them are explained - I tried searching for the meaning of a ...
AmigoJack's user avatar
  • 111
1 vote
0 answers
44 views

What is aes in "operational mode"

I'm currently reading this report on the security of the IOT protocol "LoRaWAN". On page 3, it says the following: ...
NotQuiteSo1337's user avatar
1 vote
0 answers
64 views

Question about hiding commitment scheme for integers

Given a generic group $\mathbb{G}$ of an unknown order (such as a $3000$-bit RSA group) and a randomly generated element $g \in \mathbb{G}$, is the commitment scheme $\mathrm{Com}(x)= g^x$ not ...
Mathdropout's user avatar
1 vote
0 answers
118 views

Types of cryptography

We have cryptography based on hard problems from number theory, like DDH. When we speak about symmetric cryptography with AES, a mode of encryption (CBC, ...), what is the type of problem ? What is ...
Dingo13's user avatar
  • 2,837
1 vote
0 answers
114 views

Modulo settings for successful encryption?

I saw this awesome video which shows how encryption works using "discrete logarithm". The example says: $3^x\mod17$. I understood that $3$ is called “generator”, because it has no "straight" root and ...
user avatar
0 votes
0 answers
87 views

Is it safe to derive a secret from a signature?

Many blockchain users have wallets that hold a private key, which can interact with a website. For example, the website can request the wallet to sign a specific message. 'Do only sign this message if ...
koeppelmann's user avatar
0 votes
0 answers
44 views

What does it mean exactly that an adversary can control a polynomial number of parties?

I have an intuitive idea of this, but I am not sure if I am formally interpreting it correctly. In the scenario I am considering, each party is identified by a sequence of $n$ bits and I have $2^{n}$ ...
Lorenzo's user avatar
  • 139
0 votes
0 answers
36 views

Question about terminology of public key encryption in practice

I am asking myself the following question: Say Alice sets all things up so that she is the reciever in an RSA-system. What do you call this "network" now? I hope it is clear what I mean. I ...
3nondatur's user avatar
  • 617
0 votes
0 answers
60 views

DLP instances for given number of congruences

Let $S$ be the set of $k$ congruences of the type $g_{i}^{x_i} \equiv h_i \pmod{n_i}, \quad \forall i,1\leq i \leq k$ What would be the best way to describe such set $S$ with a term in literature. ...
kub0x's user avatar
  • 898
0 votes
0 answers
162 views

Why do we always prove cryptographic protocols via completeness and soundness?

Most of the proofs that I have seen for cryptographic protocol include completeness and soundness. Why do we always prove completeness and soundness? Why do we not also see other propertes such as "...
graphtheory92's user avatar