# All Questions

27,427 questions
Filter by
Sorted by
Tagged with
58 views

1 vote
30 views

### How does Diogenes prove equivalence of discreet logs despite the candidates not being composed of safe primes

In the paper describing a protocol for distributed RSA modulus generation, Diogenes, "[they] employ a special-purpose $\Sigma$-protocol based on [Sho00] for proving correctness of exponentiations ...
• 488
4 views

### how to sign a payload with existing private key [migrated]

I have an existing private key like "4FcPXsrv3cr2rD5PULq3LYBnjYHXqvdvnCrJje1A2kMoVyFZgK5RTSM8msmQNeirvDSaR9LhPeZVyaV69oLx1WLz" (changed for obvious reason). I want to use this to sign a ...
1 vote
25 views

### HMAC-based one-time password, norm for how many counter events to check forwards in time (to see if user skipped a few)?

My bank seems to use something like HMAC-based one-time password, and it generates a new code every time I open it, and I could in theory skip a thousand codes (not use them to log in), and then the ...
• 11
1 vote
31 views

### What issues does the following Distributed Shamir Secret Sharing scheme have?

What (obvious) security issues does the following "onion" Distributed Shamir Secret Sharing scheme on a blockchain for the purpose of e-voting have? The blockchain in this context, is an ...
47 views

### Encrypting content with assymetric key pairs as a form of signing

The use-case is as follows: There is a signer, call it $S_A$ that have a claim or document $D_j$. $S_A$ wants any client $C_k, \forall k$ to be able to verify that it has not been tampered with. I ...
1 vote
47 views

### OTP like Identity

I am a developer with very little experience on the crypto part, and I'm looking for a secure solution (OTP Like) for identifying between client (browser) and server. this is what i need: Web Page at ...
52 views

### How to get started with Simulation and UC proofs?

I've been in my PhD program for a few months, and every time I try to understand the simulation and UC proof-paradigms I get so confused. I feel like what I really need is an easy set of (guided) ...
113 views

### Why does the comb of Natasha Otomoski have 21 teeth? [closed]

What is the signature size of Natasha Otomoski haircomb? What is the number of invocations of the underlying one way hash function for key generation, signature, and verification? How does it compare ...
54 views

### What is the best choice of the base g in El-Gamal PKC

I have just read in a book that in El-Gamal PKC, the best choice of a base g is a number whose order in the field ($\mathbb{F}_p$) is a large prime, and added: "approximately = $\frac{p}{2}$"...
94 views

I was learning about bitcoin cryptography and seen some strange bitcoin public addresses like this 1Lets1xxxx1use1xxxxxxxxxxxy2EaMkJ 1fuLL1xxxx1power1xxxxxxxxxxzatvCK ...
73 views

### Information Theoretic Security for Public Key Encryption

Do there exist information theoretic secure public key crypto-systems? Are they useful in any way, or are they just mathematical curiosities?
• 133
19 views

### Mersenne Twister - Get all outputs from several outputs

First of all, I'm not a programmer nor a cyrptography expert. I was doing some reading at StackExchange on mathematics subjects, and came across Mersenne Twister. And after some readings, many said ...
1 vote
82 views

### What do you think of my plan to secure on-chain sensitive data using asymetric encryption?

I’m new to development using web3 technologies and I have a use case where I want to store private data about the user in the public blockchain Polygon. This data should be recorded to be tamper proof ...
• 11
828 views

### Is the Euler totient shared in the RSA algorithm?

For what I know from the RSA algorithm, the receiver of an encrpyted message needs the Euler totient to generate its private decryption key. If the sender has chosen two primes p and q, then the Euler ...
• 139
32 views

### How does the blinding become perfect in Ferguson's Randomized Blind Signature Scheme

Trying to figure out how the scheme works I came across the last paragraph of the page. As stated, for any possible additional factor we multiply by the specified power v of the element g. How did ...
• 23
78 views

### AES-GCM with different IVs but close enough for counter to cause duplicates

I am planning to use AES-GCM or AES-CTR for encryption. However, I have read from several sources that the IVs must be unique for every piece of information encrypted. I have a doubt though, what if I ...
129 views

### Alter SPHINCS+ to have collision probability=0 and remove entropy source when signing

If you alter the SPHINCS+ signature scheme such that the number of signatures it can sign is the same as the number of hashes the hashing algorithm can output such that for example if you have a 2^256 ...
36 views

### IPS systems and AES Encrypted data [closed]

I was wondering how "IPS" systems process and react to the AES encrypted data than the DES