Skip to main content

Questions tagged [verifiable-random-function]

A verifiable random function is a public-key cryptosystem serving like a pseudorandom function under a secret key, with the additional characteristic that outputs are verifiable under the corresponding public key.

Filter by
Sorted by
Tagged with
1 vote
2 answers

Is it safe to reuse the same scalar when doing direct scalar multiplication on Koblitz curves?

Let $s$ be a private key and $k=intAsScalar(s)$. Finding $s$ from $P_k=[k]G$ involves solving the Elliptic curves discrete logarithm problem. But what if the same $k$ is also used for performing 1 or ...
user2284570's user avatar
2 votes
1 answer

How could a 1024‒bits RSA modulus be most economically factored within months today?

Of course this is a question with an answer that is due to evolve. A 2002 paper about TWIRL stated that the cost would be around 10M\$ and an other 10M\$ to manufacture the device. A later 2007 paper ...
user2284570's user avatar
0 votes
2 answers

Is it possible to perform reverse rsa encryption ? (using the public key for decrypting and the private key for encrypting)

Simple question, but I couldn’t find an answer as I know about signing but don’t want it. The aim would be to encrypt someone’s bet parameter as a short message using the private key and use the ...
user2284570's user avatar
1 vote
0 answers

Question about the Residual Pseudorandomness property in Verifiable Random Function paper, written by Micali, Rabin, Vadhan, in 1998

I am reading a paper named Verifiable Random Function, written by Micali, Rabin, Vadhan in 1998. In Residual Pseudo randomness propoerty of a VRF, it is written that If T runs for at most s(k) steps, ...
Omid Bodaghi's user avatar
6 votes
1 answer

How can 4 users generate a provable fair random number?

The past few weeks I have been trying to solve a difficult problem. I have asked some cryptography experts but unfortunately they had no clue on how to solve the problem. The situation is as follows, ...
Mathijs's user avatar
  • 61
3 votes
1 answer

Proof-of-Randomness with an EC Public Key

I will be using a tRNG to generate EC keypairs on a Secure Integrated Controller. I need to demonstrate I, the issuer, can not know the private key without colluding with the user to obtain it, even ...
WindowCleaner's user avatar
1 vote
2 answers

Is there a scheme to enforce a random seed without leaking the seed?

End-to-end encrypted web services (like cryptpad) often include a 128-bit seed in the hash part of the URL (that is not sent to the server), to derive both an identifier that is sent to the server, ...
lukasl's user avatar
  • 113
0 votes
1 answer

Using system time in nano-seconds as source of entropy in a smart contract

I am working on a smart-contract to be deployed on ETH chain. I am using an oracle(not the company!) system to get the information from off-chain (outside of the blockchain). Basically, we can think ...
Marci-man's user avatar
  • 101
3 votes
1 answer

Commit the output of verifiable random functions

The problem setting is as follows. Suppose there exists a public input $x$ and the prover evaluates $y \gets VRF_{sk}(x)$, but the prover does not wish to reveal the output $y$. My question is would ...
Chenghong's user avatar
2 votes
3 answers

How are the keys used in cryptography generated?

It seems there are keys everywhere in cryptography. From things like HMAC to encryption (both asymmetric and symmetric). The bit I do not totally understand now is how are cryptographic keys generated?...
Finlay Weber's user avatar
6 votes
4 answers

A source of randomness that anyone can independently, conveniently and robustly access?

Does there exist a source of randomness that anyone in the world can independently, conveniently and robustly access? For example, the 10th decimal place of the temperature in Mexico City is ...
chausies's user avatar
  • 335
1 vote
0 answers

Can we instantiate VRF without using pairing?

As my survey, most of(I am not sure if it is "all") the constructions of VRF are instantiated with the use of pairing. Can we construct a VRF without using pairing?
user77340's user avatar
  • 797
1 vote
0 answers

Range proofs and Groth-Sahai PPEs

I'm looking for a set of pairing product equations (ala Groth-Sahai) which allow a prover to prove that the output of a VRF is in a specific range. In the E-cash system in [BCKL] there is a ...
Krypto Mouse's user avatar
1 vote
0 answers

Group Verifiable Random Function

Is there any algorithm that allows to set up a VRF (Verifiable Random Function) from a set of Keypairs such that the knowledge of one private key and all the other public keys is enough to compute the ...
Markus Knecht's user avatar
7 votes
1 answer

What is the main difference between Unique signature and Verifiable Random Function?

The output of VRF contains two parts, the first is the output of the VRF hashing and the second is the proof of correctness. In a unique signature scheme, the signature also contains two parts which ...
Z.P.'s user avatar
  • 353
2 votes
1 answer

Can we use BLS as a VRF?

Intuitively, it seems that the hash of a BLS signature could be used as a VRF as well. In a nutshell, BLS-Signature is the VRF output and the verification first ...
Nikkolasg's user avatar
  • 204
4 votes
2 answers

Does this description of verifiable random functions seem accurate?

I've been thinking about verifiable random functions recently due to my interest in sortition (random selection of political officials). I wrote up this little paragraph below, and I'm wondering: Does ...
Will 's user avatar
  • 153
3 votes
1 answer

Does an EC signature preserve entropy?

Assume I have a perfect source of entropy, which is unknown to me, and is used to generate a private key (also unknown to me, but usable). If I make a signature with this unknown private key on a ...
asmiller's user avatar
  • 133
2 votes
0 answers

Can Verifiable Random Functions be used to pick a random node from a pool?

Let's say that I have a decentralized system and I have a list of nodes published on a public log like a blockchain. I want a node A to be able to connect to ...
David's user avatar
  • 161
17 votes
1 answer

What is the difference between signatures and VRF?

For example we have asymmetric signature scheme(RSA or ECC based) and VRF(also can be RSA/ECC based), both of them can be verified using public key of the signer/hasher and also are unique for each ...
Kesha's user avatar
  • 365
7 votes
1 answer

Simple application of verifiable random function?

I have been reading a little bit about verifiable random functions (e.g.). In the literature, these are described as "pseudo-random functions that provide a non-interactively verifiable proof for the ...
pg1989's user avatar
  • 4,646