Skip to main content

Questions tagged [verifiable-random-function]

A verifiable random function is a public-key cryptosystem serving like a pseudorandom function under a secret key, with the additional characteristic that outputs are verifiable under the corresponding public key.

Filter by
Sorted by
Tagged with
1 vote
2 answers
116 views

Is it safe to reuse the same scalar when doing direct scalar multiplication on Koblitz curves?

Let $s$ be a private key and $k=intAsScalar(s)$. Finding $s$ from $P_k=[k]G$ involves solving the Elliptic curves discrete logarithm problem. But what if the same $k$ is also used for performing 1 or ...
user2284570's user avatar
2 votes
1 answer
588 views

How could a 1024‒bits RSA modulus be most economically factored within months today?

Of course this is a question with an answer that is due to evolve. A 2002 paper about TWIRL stated that the cost would be around 10M\$ and an other 10M\$ to manufacture the device. A later 2007 paper ...
user2284570's user avatar
0 votes
2 answers
175 views

Is it possible to perform reverse rsa encryption ? (using the public key for decrypting and the private key for encrypting)

Simple question, but I couldn’t find an answer as I know about signing but don’t want it. The aim would be to encrypt someone’s bet parameter as a short message using the private key and use the ...
user2284570's user avatar
1 vote
0 answers
21 views

Question about the Residual Pseudorandomness property in Verifiable Random Function paper, written by Micali, Rabin, Vadhan, in 1998

I am reading a paper named Verifiable Random Function, written by Micali, Rabin, Vadhan in 1998. In Residual Pseudo randomness propoerty of a VRF, it is written that If T runs for at most s(k) steps, ...
Omid Bodaghi's user avatar
6 votes
1 answer
475 views

How can 4 users generate a provable fair random number?

The past few weeks I have been trying to solve a difficult problem. I have asked some cryptography experts but unfortunately they had no clue on how to solve the problem. The situation is as follows, ...
Mathijs's user avatar
  • 61
3 votes
1 answer
84 views

Proof-of-Randomness with an EC Public Key

I will be using a tRNG to generate EC keypairs on a Secure Integrated Controller. I need to demonstrate I, the issuer, can not know the private key without colluding with the user to obtain it, even ...
WindowCleaner's user avatar
1 vote
2 answers
193 views

Is there a scheme to enforce a random seed without leaking the seed?

End-to-end encrypted web services (like cryptpad) often include a 128-bit seed in the hash part of the URL (that is not sent to the server), to derive both an identifier that is sent to the server, ...
lukasl's user avatar
  • 113
0 votes
1 answer
317 views

Using system time in nano-seconds as source of entropy in a smart contract

I am working on a smart-contract to be deployed on ETH chain. I am using an oracle(not the company!) system to get the information from off-chain (outside of the blockchain). Basically, we can think ...
Marci-man's user avatar
  • 101
3 votes
1 answer
185 views

Commit the output of verifiable random functions

The problem setting is as follows. Suppose there exists a public input $x$ and the prover evaluates $y \gets VRF_{sk}(x)$, but the prover does not wish to reveal the output $y$. My question is would ...
Chenghong's user avatar
2 votes
3 answers
1k views

How are the keys used in cryptography generated?

It seems there are keys everywhere in cryptography. From things like HMAC to encryption (both asymmetric and symmetric). The bit I do not totally understand now is how are cryptographic keys generated?...
Finlay Weber's user avatar
6 votes
4 answers
629 views

A source of randomness that anyone can independently, conveniently and robustly access?

Does there exist a source of randomness that anyone in the world can independently, conveniently and robustly access? For example, the 10th decimal place of the temperature in Mexico City is ...
chausies's user avatar
  • 335
1 vote
0 answers
66 views

Can we instantiate VRF without using pairing?

As my survey, most of(I am not sure if it is "all") the constructions of VRF are instantiated with the use of pairing. Can we construct a VRF without using pairing?
user77340's user avatar
  • 797
1 vote
0 answers
58 views

Range proofs and Groth-Sahai PPEs

I'm looking for a set of pairing product equations (ala Groth-Sahai) which allow a prover to prove that the output of a VRF is in a specific range. In the E-cash system in [BCKL] there is a ...
Krypto Mouse's user avatar
1 vote
0 answers
60 views

Group Verifiable Random Function

Is there any algorithm that allows to set up a VRF (Verifiable Random Function) from a set of Keypairs such that the knowledge of one private key and all the other public keys is enough to compute the ...
Markus Knecht's user avatar
7 votes
1 answer
669 views

What is the main difference between Unique signature and Verifiable Random Function?

The output of VRF contains two parts, the first is the output of the VRF hashing and the second is the proof of correctness. In a unique signature scheme, the signature also contains two parts which ...
Z.P.'s user avatar
  • 353
2 votes
1 answer
567 views

Can we use BLS as a VRF?

Intuitively, it seems that the hash of a BLS signature could be used as a VRF as well. In a nutshell, BLS-Signature is the VRF output and the verification first ...
Nikkolasg's user avatar
  • 204
4 votes
2 answers
339 views

Does this description of verifiable random functions seem accurate?

I've been thinking about verifiable random functions recently due to my interest in sortition (random selection of political officials). I wrote up this little paragraph below, and I'm wondering: Does ...
Will 's user avatar
  • 153
3 votes
1 answer
199 views

Does an EC signature preserve entropy?

Assume I have a perfect source of entropy, which is unknown to me, and is used to generate a private key (also unknown to me, but usable). If I make a signature with this unknown private key on a ...
asmiller's user avatar
  • 133
2 votes
0 answers
502 views

Can Verifiable Random Functions be used to pick a random node from a pool?

Let's say that I have a decentralized system and I have a list of nodes published on a public log like a blockchain. I want a node A to be able to connect to ...
David's user avatar
  • 161
17 votes
1 answer
3k views

What is the difference between signatures and VRF?

For example we have asymmetric signature scheme(RSA or ECC based) and VRF(also can be RSA/ECC based), both of them can be verified using public key of the signer/hasher and also are unique for each ...
Kesha's user avatar
  • 365
7 votes
1 answer
1k views

Simple application of verifiable random function?

I have been reading a little bit about verifiable random functions (e.g.). In the literature, these are described as "pseudo-random functions that provide a non-interactively verifiable proof for the ...
pg1989's user avatar
  • 4,646