# All Questions

19,189 questions
7 views

### Commitment HIDING ⇒ Real≈Ideal in Multiple Coin Tossing Security

I'm reading /Multiple_Coin_Tossing_Security/P2_Corrupted/ ("Information Security and Cryptography" Theorem 6.7.4 starting from page 325) and after description of Simulator for P2, the author continues ...
10 views

### Golang: How to convert this ECDSA signature (points R and S) to a byte array using ASN.1 DER encoding? [on hold]

I have the following Golang function: ...
22 views

### What's the difference between symmetric and asymmetic multilinear map?

In pairing-based cryptography, we have 3 types, namely Type-I, where $\mathbb{G}_1 = \mathbb{G}_2$, and in Type-II and Type-III we have that $\mathbb{G}_1 \neq \mathbb{G}_2$, however in Type-II we ...
7 views

### question about using BulletProofLib code [migrated]

I'm having trouble understanding the library for generating non-interactive zero knowledge proofs without trusted setup (Bulletproofs) https://github.com/jpmorganchase/BulletProofLib The paper Zero ...
14 views

...
57 views

### Verifiable delay functions vs Proof of Sequential Work

I've read recent papers about verifiable delay functions (Boneh et al 2018) and proof of sequential works (Cohen et al. 2018). I understand that the core difference between the definitions is that a ...
14 views

### how to compute Bit Independence criterion of SBOX?

I want to compute BIC's of my Sboxes, I found out some theses for that but I could not understand how to do it. Can someone help me?
41 views

### curve25519 by openSSL

How can i generate ec curve25519 keys using openSSL? When I run openssl ecparam -name curve25519 -genkey -noout -out private.ec.key I have this message ...
27 views

### NIZK proof for Order-preserving encryption

Suppose a cipher c=Enc(K,m), where Enc() is the order-preserving encryption scheme. Can NIZK be used to prove that c does indeed encrypt m? The Schnorr NIZK is based on discrete logarithms equality. I ...
22 views

### Build a PEM file by having ec public key coordinates [on hold]

I have the coordinates (x,y) of eliptic curve point that is my public key. How can i build the PEM ( or DER ) file for my public key? I don't care about language (java, python, javascript, ...) ...
74 views

### Static Diffie-Hellman in TLS

Static Diffie-Hellman (cipher suites with DH in their name but neither DHE or DH_anon - ...
36 views

### Zero knowledge proof with sum

All zero-knowledge protocols I have read so far for discrete log works like this: 1) Prover generate a random number $r$, creates a commitment $t=g^r$ and sends $t$ to the verifier. 2) Verifier ...
16 views

### How is an Encrypted iTunes Backup's Manifest.db encrypted?

When you do an Encrypted iTunes Backup, it encrypts the data but it also encrypts the Manifest.db file as well, which contains the information about the rest of the iTunes Backup. How is the ...
25 views

### Security of HOTP over an unencrypted channel for controling an actuator

I have a simple on/off actuator that I want to control remotely. I want to use available hardware: a pair of microcontrollers connected to a pair of wireless transceiver modules. Can HOTP algorithm ...
20 views

### Do AEAD algorithms and encrypt-then-MAC mitigate external decryption oracles?

I'm curious about a possible attack scenario that I'm not sure exists. If it is possible, I'd like to know if and how AEAD algorithms and encrypt-then-MAC implementations protect against it. The ...
49 views

11 views

### Why in Efs file system (windows OS) is not possible to encrypt directly a compressed file? [migrated]

EFS File system doesn't permit to encrypt directly a compressed file. The opposite process is clear because is impossible practically but this one i can't understand
50 views

### Group Rings on Cryptography

Let $R[G]$ or $RG$ be the group ring where $R=F_q$ and $G$ is any group. Let $Dim(V)=\vert G \vert$. It's clear that $V$ has $\vert R \vert^{\vert G \vert}$ distinct $\vert G \vert$-tuples. This ...
1k views

### In which public key encryption algorithms are the private and public key not reversible?

The RSA public key encryption system has the characteristic that the public key and the private key can be reversed. That is, information encrypted with the public key can be decrypted with the ...
47 views

### MPC and Secret Sharing in not Fully-Connected Network

I have an interest in applications of MPC and Secret Sharing. My point of view is from fields of distributed computing and Game Theory. I want to generalize some results to arbitrary network ...
42 views

### Encryption/Decryption on multiple users using RSA?

Supposing I have Alice that is the RA, Bob (who is a user) and Kate (who is also a user). For now I use RSA. Alice sends a message to Bob. Alice also sends a message to Kate. Bob and Kate exchange ...
91 views
+50

### Signal Protocol - One Time Pre Keys (OTPK)

In Signal Protocol one time pre keys are a key only used once by Alice and taken from Bob, they provide forward secrecy (If the identity private key and signed private pre key which were used to ...
41 views

### Modifying Elliptic Curve Parameters

For context, I was watching this bit of the video: which goes over this source code. The piece is about elliptic curve cryptography and how it works. I want to use some of this knowledge to make my ...
59 views

### How can the Enigma's plugboard settings be found with partially known plaintext?

I don't quite understand the procedure described on wikipedia, is there a generalized procedure you can follow to rule out a pairing on the plugboard? For example, let's say the cipher text is ...
30 views

176 views
+100

### Can future Bitcoin hashes be considered a good source to generate random numbers?

There are a lot of miners trying to calculate the next valid SHA-256 hash using random strings, so can I consider that generated hashes have good randomness? How can I prove it? For example, use the ...
48 views

### Is my approach for authenticated key derivation based on a master key secure? [on hold]

My goal is to be able to have a single Master Key and store this on a central machine. A client communicates with this central machine to request and receive a certified key derived from this master ...
17 views

### Iinformation Security basic literatue [on hold]

I'm starting to study Information Security to write my Undergraduate thesis. What are the most famous and basic literature which cover the following topics: Principles (Availability, Integrity and ...