All Questions

Filter by
Sorted by
Tagged with
1
vote
0answers
13 views

SSH Server Configuration Best Practices? [migrated]

I hope this is the right place to post this. I have been tasked with reviewing the settings of an SSH server, I'm currently trying to figure out what are the best practices, and I'm having a bit of ...
1
vote
1answer
195 views

Timing attacks: Symmetric vs Asymmetric Algorithms

There is a statement that I can't give a reference; "Since the timing characteristics of symmetric algorithms are not as key dependent as asymmetric algorithms, they are more resistant against ...
2
votes
0answers
31 views

key reuse: does knowing H(S) reveal HMAC(S)

given a hash H() , like sha256 and a secret text S and a public salt P will knowing H(S) reveal HMAC(P, S) ? to clarify: the question is if it possible to learn the digest, not the secret. In my ...
2
votes
0answers
34 views

Cyclical Redundancy Check and bijections [closed]

Let $F_M(n)=\operatorname{CRC32}(M|n)$, where $M$ is an arbitrary length prefix message, $n$ is a 32 bit integer (whether little or big-endian encoded is unimportant) and "|" is simply ...
1
vote
0answers
51 views

Current research problems in Lattice based Crypto [closed]

I am looking for research problems in lattice based Crypto. Can anybody help?
1
vote
1answer
223 views

What is a function on a Line or a Curve?

I am reading up on Pairings using Elliptic curves & all the texts talk about functions on a Curve. I am finding it difficult to even figure out what they mean by "function on a curve" or ...
0
votes
0answers
48 views

Double encrypted cipher involving polybius square [closed]

I am trying to solve this cypher. I know that the cipher is double encrypted and that the second step is a Polybius square with the key of the letters of the alphabet in order from a - y. However I do ...
0
votes
1answer
221 views

Why are public keys derived from elliptic curve cryptography (ECC) and not from hashing?

I've just started studying Bitcoin and cryptocurrencies, so I might be wrong, but so far my understanding is that public keys are derived from private keys using ECDSA, in Bitcoin's case using ...
0
votes
0answers
20 views

Why I'm getting ValueError while trying to unpad the data? [closed]

In short, I'm developing an encrypted chat using ECDH + AES. All encrypting and decrypting algorithms work just fine when I'm testing them separately. They are also working when there is established ...
4
votes
2answers
162 views

Testing of PQC NIST round3 submissions

I am new to this field and have some concerns regarding PQC; How does NIST do a comparison that a particular algorithm is efficient and its security can not be broken by future quantum attacks? I am ...
0
votes
1answer
71 views

Is the base equally well protected by the discrete logarithm problem as the exponent?

I'd like to ask if in case of modular exponentiation, reverse engineering the base would be equally difficult, when knowing the exponent as determining the exponent is hard when the base is provided? ...
1
vote
1answer
26 views

AWS IoT - Unique Keys per each device - Data encryption

(Probably not the right board to ask. But here goes) I'm designing an IoT Solution with RPi as client and AWS as the server. On the client hardware, I have an Security Chip that can securely generate ...
0
votes
0answers
27 views

What is the difficulty_1 value of Bitcoin Gold? [closed]

I have searched an incredible amount of time on the internet looking for the base difficulty of Bitcoin Gold without any result. The difficulty of Bitcoin Gold at this point in time is 204460. I need ...
0
votes
0answers
33 views

Wireguard: How do I verify web traffic & would it be considered encrypted? [migrated]

I setup a connection between my Windows PC & a VitualBox Debian Server running WireGuard using this walkthrough. The connection appears to be working because the Windows WireGuard Client GUI shows ...
1
vote
2answers
99 views

Is there any fundamental difference between the block cipher operations encryption and decryption?

Is there any fundamental reason to designate one direction of a block cipher as "encryption" and the other "decryption"? Or are these arbitrary choices? Or perhaps practical ...
0
votes
2answers
87 views

What are security reductions of symmetric-key algorithms?

I was reading Wikipedia page of post-quantum cryptography. It says that it is desirable for cryptographic algorithms to be reducible to some particular mathematical problem, that is intractability of ...
0
votes
2answers
67 views

Bringing a key to 256 bit by a hash algorithm

For example, if I use Rijndael for encryption, I have to specify a key of a certain length. For user convenience, I want the user to be able to use a key of any length. Then, to get the key to the ...
9
votes
3answers
973 views

Any advantage to a block cipher which is not efficiently invertible?

The classic definition of a PRP includes efficient invertibility. Given that many modern cipher modes (CTR-based e.g. GCM) use only the forward direction of the block cipher, it seems that the ...
5
votes
1answer
453 views

Shamir secret sharing where some specific people are required to participate

By using SSSS we distribute the key to "N" people where any "k" (N>=k) are required to participate to unlock the code. But what if I wish to have the people "x" and &...
0
votes
0answers
29 views

What would you tell this string is? [closed]

I have found this string gyO0uqISbC7xThS/f7Wx5Q== but I'm not able to decode it. I've tried Base64, Rot13 and more things but nothing seems to be working. Thanks
3
votes
1answer
58 views

Why does CBC-MAC(M) = CFB-MAC(M)?

I don't understand why $\text{CBC-MAC}(M) = \text{CFB-MAC}(M)$. Has it something to do with $\text{CBC-MAC}(M) = C_L$ and $\text{CFB-MAC}(M) = E_K(C'_{L-1})$?
1
vote
0answers
49 views

Hashing function: Generate unique 3 letters Identifier [closed]

I need to create an id generation function that takes 4-digit number and returns a unique 3-letter identifier. I already have a function that generates a 2-letter id from 3-digit number with some ...
0
votes
0answers
10 views

Is it possible to use non-deterministic ECDSA signatures schemes for signing Ethereum transactions/messages? [migrated]

Is it possible to use a non-deterministic/probabilistic (choosing k randomly and not HMAC-derived from msgHash + privKey like RFC 6979 states) ECDSA signature scheme for Ethereum Signatures? If yes, ...
0
votes
0answers
13 views

How to use d2i_ECPrivateKey() to load my private key in c++ with openSSL [closed]

I'm trying to use d2i_ECPrivateKey() to load key from a std::string which contains my private key. My goal is to do the ECDSA signing. My code snippet. ...
0
votes
0answers
66 views

Homomorphic Encryption Library Supporting Addition, Multiplication & Logical Shift

Does anyone know of a C++ homomorphic encryption library that supports addition, multiplication and logical right shift over integers? Some set of instructions that allows the implementation of ...
0
votes
1answer
41 views

Number of Involuntory Keys in Permutation Cipher

I've came with the following problem from the Theory and Practice book by Stinson-Paterson. It states the following: 2.17 (a) Prove that a permutation $\pi$ in the Permutation Cipher is an ...
0
votes
1answer
66 views

Pretty much confused about pretty good privacy-:

Authentication-: I understand that authentication is basically digital signature. But what I don't understand is how it has been explained here specially the RSA key part. It is leading me to huge ...
1
vote
1answer
35 views

computation time of pairing operations and their securities

Suppose G1 is an elliptic group and G2 be a multiplicative group and they are of same prime order p and e is a bilinear pairing, e: G1 X G1 -> G2. The operations e(p,q)r and e(pr,q) gives equal ...
0
votes
1answer
52 views

Reverse SHA256 Hashed Value from Multiple Instances where Part of Hashed Value is known

I apologize in advance if this question has been answered already. However, I have not been able to find an existing answer - despite the case being pretty simple and common I imagine. Perhaps there ...
1
vote
1answer
59 views

Can attacker steal data from AES encrypted table without knowing the key?

I think of a situation that attacker can steal data from AES encrypted table without knowing the key. I tried to search on internet but found nothing about this(may be I were not using the correct ...
1
vote
0answers
22 views

Examples of oblivious transfer protocols secure under stronger security assumptions than semi-honest model?

The question is basically stated on the title. I have done some introductory reading on Oblivious Transfer and most of them are secure in the semi-honest model. Are there any protocols that are secure ...
0
votes
1answer
26 views

How to prove that paillier encryption is positive (zero-knowledge)?

Is it possible that the plaintext encrypted in a ciphertext using paillier encryption is positive without using a zero knowledge range proof?
0
votes
0answers
28 views

How to securely store data with an untrustworthy party?

Alice wants to store key:value pairs with Bob. The goal of the exercise is for Alice to be able to use Bob as a reliable data storage service, even if Bob were ...
2
votes
0answers
48 views

Short Nonces in ECDSA signature generation

Recently I noticed that my device generates short-sized Nonces. Approximately $2 ^ {243} - 2^{244}$. Could it turn out that there will be a small leak of ...
2
votes
3answers
87 views

What does counter mean in Counter (CTR) Mode? Is it the same as nonce?

As asked above, what does "counter" mean exactly? Is it the same as nonce? Also, the book Network Security Essentials (6ed.) from William Stallings states, "Typically the counter is ...
0
votes
0answers
30 views

Breaking vigenere cypher using the one-time pad flaw when used for a second time

I got an idea which may be wrong because I may have missed some important factor but for the moment I don't know if I really did. Let BM be the method used to break a reused one-time pad cipher (which ...
0
votes
0answers
19 views

What's the best Noise Protocol authentification pattern with minimal overhead for IOT?

I want to use NoiseSocket protocol to connect embedded IoT devices to the server. On the device's side code runs on a small 32bit MCU. For cipher function and hash will use ChaChaPoly and BLAKE2s for ...
0
votes
0answers
36 views

Don't know how to approach this problem, or where to start. Finding an adversary to a hiding and binding game

I have this problem: I also have the python version of this problem here: ...
5
votes
1answer
1k views

Can a series of triangle reflections be used for cryptography?

(I guess no but why is this the case? Any way to make it possible?) Out of a given equilateral triangle T1 (with his 3 vertices A,B,C lying in a finite Field $\mathbb F_N^D $) another equilateral ...
0
votes
0answers
56 views

I am confused on how to solve this question about one way hashing

I know that I have to use decryption, but I am confused about how it breaks one-way (preimage resistance)
2
votes
0answers
19 views

What is the link between anonymous credentials and transactional pseudonyms?

Anonymous credentials are used to prove certain properties of a specific user without revealing any other information, and transactional pseudonyms are used to authenticate a user as the rightful ...
0
votes
0answers
19 views

mutual authentication in STS protocol

STS Protocl is like this: (1) A → B : g^x (2) A ← B : g^y, E_K(S_B(g^y, g^x)) (3) A → B : E_K(S_A(g^x, g^y)) my question is why do we say in sts we have mutual ...
2
votes
1answer
50 views

Solve DLOG using a probabilistic algorithm for DLOG lsb

Following the question Can I know from a Bitcoin public key if the private key is odd or even? The answer there gives a simple algorithm for solving the Discrete Logarithm Problem when given an oracle ...
0
votes
1answer
72 views

Get bit i when modulo n

Is there a way to recover the bit sequence of a number ( for example 29 = 0b11101 ) by always dividing it by 2 when in mod 143 for example ? What I mean by that is recover the number bit by bit by ...
2
votes
1answer
46 views

Is this a safe zero knowledge proof that two paillier encryptions are equal?

We have encryptions $c_1$ and $c_2$, the person who knows the plaintext and randomness in both wants to prove that they know it. Let $r_1$ and $r_2$ be the randomness values in $c_1$ and $c_2$ ...
0
votes
0answers
30 views

Zero-knowledge proofs for preventing data abuse

I am looking for a theoretical solution to the following problem: Alice receives a signed statement from her bank with information about her account and credit balance. Alice wants to prove this ...
0
votes
1answer
56 views

What's the difference between permutation and transposition?

I am trying to understand the difference between permutation and transposition. I have seen a similar question in the forum but I would like to ask you for proper definitions and examples of each. I'm ...
0
votes
0answers
34 views

Cryptography (DSA) Get Value of k and private Key

i am on a task in cryptography and need a hint (PLEASE NO SOLUTION). The Task is: I can send Messages (Digital Numbers) to a Docker Container. The response are the values p,q,g,z1,s,r and hashvalue(m+...
0
votes
0answers
31 views

In paillier homomorphism, how is the randomness r changed during addition?

Two add the plaintexts encrypted in a ciphertext, you would just multiply the ciphertext and modulo it. However, how does the randomness value of the new ciphertext change? Assuming you the encryptor ...
0
votes
0answers
13 views

Are there applications of sanitizable signatures without transparency property?

Are there applications of sanitizable signatures without transparency property ?

15 30 50 per page