# All Questions

2,263 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
57 views

### Does the bias in RC4 drop asymptotically further in the keystream?

It's well-known that the RC4 keystream has significant biases that become less prominent later in the keystream. The most severe bias is in the second byte, which has a 128-1 bias towards zero. Other ...
50 views

### Transferable zero-knowledge proofs

Many interactive ZK-proofs satisfy non-transferability; that is, the prover performs a series of actions to convince the verifier of a certain fact, and this verifier can't use this proof to convince ...
92 views

### Aside from Keccak, are there any keyed/unkeyed permutations where the choice of all rotation constants is not based on heuristic methods?

I am interested to see examples of cryptographic algorithms (namely, keyed or unkeyed permutations that transform an $n$-bit input to an $n$-bit output) where the choice of all rotation values is not ...
190 views

### How does post quantum key exchange in OpenSSH 8 work?

OpenSSH 8 supports a post quantum KEX, namely sntrup4591761x25519-sha512@tinyssh.org It says in its description that it is basically NTRU + ECC X25519. However, I have tried but cannot understand how ...
67 views

Let $G:\{0,1\}^*\rightarrow\{0,1\}^*$ be a length doubling PRG, and let $\Pi=(Gen,Mac,Vrfy)$ be the following MAC scheme: $Gen$ on input $1^n$ uniformly samples and outputs $k\leftarrow \{0,1\... 0answers 113 views ### Privacy of Multiplication of Shamir Shared Secrets with an Active Adversary Where Final Result is Revealed to a Third Party Over a Secure Channel I have the following question related to the privacy of multiplication of Shamir Shared Secrets: Suppose we have two secrets, a and b, shared by a Shamir Secret Sharing Scheme in a (k,n) ... 0answers 92 views ### Which compression functions are MACs? The original HMAC paper based the security proof on the fact that the compression function of the Hash is already a MAC (appropriately keyed). How does this relate to common assumptions for ... 0answers 178 views ### Differential Path Search of a Block Cipher Camellia Design and Analysis document refers to a paper: [24] M. Matsui, "Differential Path Search of the Block Cipher E2," (in Japanese), Technical report of IE- ICE, ISEC99-19, pp.57-64, The ... 0answers 55 views ### Performing DFS search with garbled boolean circuit Given$G=(V,E)$How can i implement a DFS search in the Boolean circuit? ( The output should be to assign each node it's DFS value from a root node) I assume the complexity should be exponential, ... 0answers 99 views ### What are some of the current relevant fully homomorphic schemes? As of February 2017, I have the feeling that all information on FHE is currently a bit scattered and finding a good summary/ timeline on the topic is really hard. I'm currently looking into FHE over ... 0answers 70 views ### Can a PGP subordinate key be used as a web of trust signing key? I already understand the desire to segregate a PGP master key from subkeys, allowing me to keep the master key in some off-site non-networked location while making use of the subkeys to do things like ... 0answers 134 views ### Explanation of the term “view” for algorithm or adversary What is the view of an algorithm/adversary? Is view just a term used to describe the output over a set of inputs for a probabilistic algorithm? For example: Consider experiment Mac-forgeA,Π (n). ... 1answer 128 views ### Noise of ciphertexts in LWE/RLWE based FHE Often times$[\langle \textbf{c}, \textbf{s} \rangle]_q$is referred to as the noise associated to the ciphertext$\textbf{c}$, and that decryption is correct when the norm of the noise is$< q/2$. ... 0answers 899 views ### How babai nearest plane algorithm solves approximate CVP Babai's nearest plane algorithm solves approximate-CVP (Closest Vector Problem) where the approximation factor is$2(\frac{2}{\sqrt{3}})^n$. Let$b_1,...,b_n$be a basis and$t\$ be the target. This ...
I am struggling to understand how to perform a sextic twist over a BN elliptic curve. This is what I understood so far: Let's consider a BN elliptic curve: $$E: y^2=x^3+b$$ And let's consider a ...