# All Questions

25,897 questions
Filter by
Sorted by
Tagged with
13 views

### SSH Server Configuration Best Practices? [migrated]

I hope this is the right place to post this. I have been tasked with reviewing the settings of an SSH server, I'm currently trying to figure out what are the best practices, and I'm having a bit of ...
195 views

### Timing attacks: Symmetric vs Asymmetric Algorithms

There is a statement that I can't give a reference; "Since the timing characteristics of symmetric algorithms are not as key dependent as asymmetric algorithms, they are more resistant against ...
31 views

### key reuse: does knowing H(S) reveal HMAC(S)

given a hash H() , like sha256 and a secret text S and a public salt P will knowing H(S) reveal HMAC(P, S) ? to clarify: the question is if it possible to learn the digest, not the secret. In my ...
34 views

### Cyclical Redundancy Check and bijections [closed]

Let $F_M(n)=\operatorname{CRC32}(M|n)$, where $M$ is an arbitrary length prefix message, $n$ is a 32 bit integer (whether little or big-endian encoded is unimportant) and "|" is simply ...
51 views

### Current research problems in Lattice based Crypto [closed]

I am looking for research problems in lattice based Crypto. Can anybody help?
223 views

### What is a function on a Line or a Curve?

I am reading up on Pairings using Elliptic curves & all the texts talk about functions on a Curve. I am finding it difficult to even figure out what they mean by "function on a curve" or ...
48 views

### Double encrypted cipher involving polybius square [closed]

I am trying to solve this cypher. I know that the cipher is double encrypted and that the second step is a Polybius square with the key of the letters of the alphabet in order from a - y. However I do ...
221 views

### Why are public keys derived from elliptic curve cryptography (ECC) and not from hashing?

I've just started studying Bitcoin and cryptocurrencies, so I might be wrong, but so far my understanding is that public keys are derived from private keys using ECDSA, in Bitcoin's case using ...
20 views

### Why I'm getting ValueError while trying to unpad the data? [closed]

In short, I'm developing an encrypted chat using ECDH + AES. All encrypting and decrypting algorithms work just fine when I'm testing them separately. They are also working when there is established ...
162 views

### Testing of PQC NIST round3 submissions

I am new to this field and have some concerns regarding PQC; How does NIST do a comparison that a particular algorithm is efficient and its security can not be broken by future quantum attacks? I am ...
71 views

### Is the base equally well protected by the discrete logarithm problem as the exponent?

I'd like to ask if in case of modular exponentiation, reverse engineering the base would be equally difficult, when knowing the exponent as determining the exponent is hard when the base is provided? ...
26 views

### AWS IoT - Unique Keys per each device - Data encryption

(Probably not the right board to ask. But here goes) I'm designing an IoT Solution with RPi as client and AWS as the server. On the client hardware, I have an Security Chip that can securely generate ...
27 views

### What is the difficulty_1 value of Bitcoin Gold? [closed]

I have searched an incredible amount of time on the internet looking for the base difficulty of Bitcoin Gold without any result. The difficulty of Bitcoin Gold at this point in time is 204460. I need ...
33 views

### Wireguard: How do I verify web traffic & would it be considered encrypted? [migrated]

I setup a connection between my Windows PC & a VitualBox Debian Server running WireGuard using this walkthrough. The connection appears to be working because the Windows WireGuard Client GUI shows ...
99 views

### Is there any fundamental difference between the block cipher operations encryption and decryption?

Is there any fundamental reason to designate one direction of a block cipher as "encryption" and the other "decryption"? Or are these arbitrary choices? Or perhaps practical ...
87 views

### What are security reductions of symmetric-key algorithms?

I was reading Wikipedia page of post-quantum cryptography. It says that it is desirable for cryptographic algorithms to be reducible to some particular mathematical problem, that is intractability of ...
67 views

### Bringing a key to 256 bit by a hash algorithm

For example, if I use Rijndael for encryption, I have to specify a key of a certain length. For user convenience, I want the user to be able to use a key of any length. Then, to get the key to the ...
973 views

### Any advantage to a block cipher which is not efficiently invertible?

The classic definition of a PRP includes efficient invertibility. Given that many modern cipher modes (CTR-based e.g. GCM) use only the forward direction of the block cipher, it seems that the ...
453 views

### Shamir secret sharing where some specific people are required to participate

By using SSSS we distribute the key to "N" people where any "k" (N>=k) are required to participate to unlock the code. But what if I wish to have the people "x" and &...
29 views

### What would you tell this string is? [closed]

I have found this string gyO0uqISbC7xThS/f7Wx5Q== but I'm not able to decode it. I've tried Base64, Rot13 and more things but nothing seems to be working. Thanks
58 views

### Why does CBC-MAC(M) = CFB-MAC(M)?

I don't understand why $\text{CBC-MAC}(M) = \text{CFB-MAC}(M)$. Has it something to do with $\text{CBC-MAC}(M) = C_L$ and $\text{CFB-MAC}(M) = E_K(C'_{L-1})$?
49 views

### Hashing function: Generate unique 3 letters Identifier [closed]

I need to create an id generation function that takes 4-digit number and returns a unique 3-letter identifier. I already have a function that generates a 2-letter id from 3-digit number with some ...
10 views

### Is it possible to use non-deterministic ECDSA signatures schemes for signing Ethereum transactions/messages? [migrated]

Is it possible to use a non-deterministic/probabilistic (choosing k randomly and not HMAC-derived from msgHash + privKey like RFC 6979 states) ECDSA signature scheme for Ethereum Signatures? If yes, ...
13 views

### How to use d2i_ECPrivateKey() to load my private key in c++ with openSSL [closed]

I'm trying to use d2i_ECPrivateKey() to load key from a std::string which contains my private key. My goal is to do the ECDSA signing. My code snippet. ...
66 views

### Homomorphic Encryption Library Supporting Addition, Multiplication & Logical Shift

Does anyone know of a C++ homomorphic encryption library that supports addition, multiplication and logical right shift over integers? Some set of instructions that allows the implementation of ...
41 views

### Number of Involuntory Keys in Permutation Cipher

I've came with the following problem from the Theory and Practice book by Stinson-Paterson. It states the following: 2.17 (a) Prove that a permutation $\pi$ in the Permutation Cipher is an ...
66 views

### Pretty much confused about pretty good privacy-:

Authentication-: I understand that authentication is basically digital signature. But what I don't understand is how it has been explained here specially the RSA key part. It is leading me to huge ...
35 views

### computation time of pairing operations and their securities

Suppose G1 is an elliptic group and G2 be a multiplicative group and they are of same prime order p and e is a bilinear pairing, e: G1 X G1 -> G2. The operations e(p,q)r and e(pr,q) gives equal ...
52 views

### Reverse SHA256 Hashed Value from Multiple Instances where Part of Hashed Value is known

I apologize in advance if this question has been answered already. However, I have not been able to find an existing answer - despite the case being pretty simple and common I imagine. Perhaps there ...
59 views

### Can attacker steal data from AES encrypted table without knowing the key?

I think of a situation that attacker can steal data from AES encrypted table without knowing the key. I tried to search on internet but found nothing about this(may be I were not using the correct ...
22 views

### Examples of oblivious transfer protocols secure under stronger security assumptions than semi-honest model?

The question is basically stated on the title. I have done some introductory reading on Oblivious Transfer and most of them are secure in the semi-honest model. Are there any protocols that are secure ...
26 views

### How to prove that paillier encryption is positive (zero-knowledge)?

Is it possible that the plaintext encrypted in a ciphertext using paillier encryption is positive without using a zero knowledge range proof?
28 views

### How to securely store data with an untrustworthy party?

Alice wants to store key:value pairs with Bob. The goal of the exercise is for Alice to be able to use Bob as a reliable data storage service, even if Bob were ...
48 views

### Short Nonces in ECDSA signature generation

Recently I noticed that my device generates short-sized Nonces. Approximately $2 ^ {243} - 2^{244}$. Could it turn out that there will be a small leak of ...
87 views

### What does counter mean in Counter (CTR) Mode? Is it the same as nonce?

As asked above, what does "counter" mean exactly? Is it the same as nonce? Also, the book Network Security Essentials (6ed.) from William Stallings states, "Typically the counter is ...
30 views

### Breaking vigenere cypher using the one-time pad flaw when used for a second time

I got an idea which may be wrong because I may have missed some important factor but for the moment I don't know if I really did. Let BM be the method used to break a reused one-time pad cipher (which ...
19 views

### What's the best Noise Protocol authentification pattern with minimal overhead for IOT?

I want to use NoiseSocket protocol to connect embedded IoT devices to the server. On the device's side code runs on a small 32bit MCU. For cipher function and hash will use ChaChaPoly and BLAKE2s for ...
36 views

### Don't know how to approach this problem, or where to start. Finding an adversary to a hiding and binding game

I have this problem: I also have the python version of this problem here: ...
1k views

### Can a series of triangle reflections be used for cryptography?

(I guess no but why is this the case? Any way to make it possible?) Out of a given equilateral triangle T1 (with his 3 vertices A,B,C lying in a finite Field $\mathbb F_N^D$) another equilateral ...
56 views

### I am confused on how to solve this question about one way hashing

I know that I have to use decryption, but I am confused about how it breaks one-way (preimage resistance)
19 views

### What is the link between anonymous credentials and transactional pseudonyms?

Anonymous credentials are used to prove certain properties of a specific user without revealing any other information, and transactional pseudonyms are used to authenticate a user as the rightful ...
19 views

### mutual authentication in STS protocol

STS Protocl is like this: (1) A → B : g^x (2) A ← B : g^y, E_K(S_B(g^y, g^x)) (3) A → B : E_K(S_A(g^x, g^y)) my question is why do we say in sts we have mutual ...
50 views

### Solve DLOG using a probabilistic algorithm for DLOG lsb

Following the question Can I know from a Bitcoin public key if the private key is odd or even? The answer there gives a simple algorithm for solving the Discrete Logarithm Problem when given an oracle ...
72 views

### Get bit i when modulo n

Is there a way to recover the bit sequence of a number ( for example 29 = 0b11101 ) by always dividing it by 2 when in mod 143 for example ? What I mean by that is recover the number bit by bit by ...
46 views

### Is this a safe zero knowledge proof that two paillier encryptions are equal?

We have encryptions $c_1$ and $c_2$, the person who knows the plaintext and randomness in both wants to prove that they know it. Let $r_1$ and $r_2$ be the randomness values in $c_1$ and $c_2$ ...
30 views

### Zero-knowledge proofs for preventing data abuse

I am looking for a theoretical solution to the following problem: Alice receives a signed statement from her bank with information about her account and credit balance. Alice wants to prove this ...
56 views

### What's the difference between permutation and transposition?

I am trying to understand the difference between permutation and transposition. I have seen a similar question in the forum but I would like to ask you for proper definitions and examples of each. I'm ...
34 views

### Cryptography (DSA) Get Value of k and private Key

i am on a task in cryptography and need a hint (PLEASE NO SOLUTION). The Task is: I can send Messages (Digital Numbers) to a Docker Container. The response are the values p,q,g,z1,s,r and hashvalue(m+...