# All Questions

22,261 questions
Filter by
Sorted by
Tagged with
23 views

### Multi-recipient key exchange

The question is: does this public key encryption system have (roughly) the same security for n=1 as for say n=100? (and check my work that for n=1 it has exactly the same security as standard IES). ...
56 views

### To what extent would Bitcoin be private without address reuse?

Let's say Bitcoin had these rules from the start: An address with balance cannot more receive money An address must use all its money in one transaction This would prevent address re-use. To what ...
35 views

### All Curve25519 Parameters with Explanation

I'm trying to sum up all Curve25519 parameter and specification reasons. Can you tell me if I missed some important reasons or parameters in the following list?: Curve: Montgomery Curve. Reason: The ...
18 views

### Provable Data Possession

While Provable Data Possession seems to be a very useful and interesting tool for ensuring integrity of data outsourced into Cloud providers, I have never seen a reputed Cloud provider talk about this ...
46 views

### Find IV and the key ? AES with CFB or OFB

I have a question about the AES-128 and AES-256 encryption method. I need to encrypt 64-bit size data in and out. I want to encrypt them with AES. So I turned to AES-OFB or AES-CFB because these ...
35 views

### Small (code-size) hash functions

I am trying to implement a small encryption tool in as little code as possible as a learning exercise, and currently have managed to get everything to depend only on a HMAC construct. However, most ...
114 views

### Likelihood of signature collision with EdDSA

Taking EdDSA as an example, given the length of a signature is 512-bits for a given data payload, what is the probability of a collision where there is another 512-bit value that is also a valid ...
37 views

### Content Key Encryption for Multi-User data access

I recently worked out a concept for a use-case, but I'm not sure if my approach is good enough. So I would appreciate feedback and things to look out for, as I'm fairly new to this field. A User can ...
64 views

### Deterministic DSA by Thomas Pornin (Java Illustration, its Errors) [closed]

(DISCLAIMER: I'm clearly seeking a point to be illustrated from a white paper as explained here, "How should questions be handled involving code?", and <...
21 views

### Why blinding integer $r$ needs to be co-prime with $N$ in blind RSA signature

According to blind RSA signature wiki the random value $r$ in $m^\prime=mr^e \bmod N$ needs to be relatively prime to $N$. Why is this a requirement? A follow up a related question: after $s$ (...
14 views

### Is there any digital communication medium that provided close-to-perfect security? [migrated]

Problem When I browse this forum, I constantly read about the weaknesses of popular "secure" messaging applications such as Signal, Telegram, and WhatsApp. Some of the most notable critiques ...
101 views

### What does perfect mean within perfect forward secrecy and why do some cryptographers disagree with the term?

In this blog post, Matthew Green says Forward secrecy (usually misnamed “perfect forward secrecy”)... The Wikipedia article on forward secrecy (which the same sentence links to in the blog) says ...
30 views

### I have a puzzle I can’t solve, need help [closed]

The only clue I have is that the person who wrote this writes their letters like numbers The message: 182119154193 x 151815209815414 0457185519125 The key, I ...
49 views

### Which cryptographic attacks can AES 128-bit withstand?

Most of the articles and forums are stating that the Brute Force attack can test the strength of an encryption algorithm. However, I am looking for those attacks that AES can withstand for the testing ...
21 views

### How to convert a 4 digit number (supposedly the PGP private key) into a PEM format and how to code this? [closed]

Someone sent me a PGP encrypted message (it's not a file but in a text message) and the private key to decrypt it is not given. But he gave me a hint, that the private key is a 4 digit number. I can ...
33 views

### Key strength comparison: symmetric key vs RSA/DH key

I came across different reputable sources quoting different equivalent symmetric key strengths for RSA/DH keys. This NIST paper (page 67/161) states the following offer corresponding security ...
83 views

### Generating a XOR Hash function for a given group of numbers to maximise collisions

Given $x$, a vector of $m$ distinct bit vectors of bit length $N$, I want to use an XOR-hash $h$ such that all $x_i$ collide to the same value. I define an XOR hash $h$ which takes bit vector $q$ as ...
18 views

### volume only saves files in clusters of 512 bytes, regardless of how large i select the cluster and format [closed]

I am experimenting clusters and formatting in veracrypt, and I have found that no matter how large or small I format the clusters in my veracrypt volumes, no matter how small the files I save, they ...
49 views

### Performing EdDSA/Ed448 employing Montgomery ladder

EdDSA can be efficiently performed employing the Montgomery ladder. In order to implement this method, the base point should be converted to Mont. space, then the Mont. ladder should be executed, and ...
34 views

### RSA encryption/decryption values not working as expected [duplicate]

I'm faced with an issue I can't seem to understand when it comes to RSA. Below are my values for all of the parameters, unfortunately I can't seem to get the expected decrypted values from my ...
47 views

### Retrieve message from rsa ciphertext based on some conditions

Let's say: $x = m^{e-1}\bmod n$ $y = m^{d-1}\bmod n$ Here $m$ is a message, $e$ is public exponent, $d$ is private key and $n$ is the modulus. Now if I know $e, x, y$, and $n$, can I retrieve the ...