All Questions

3,642 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
17 views

Check correctness of data using only publicly known variables and a server response

A smart contract (a publicly known program) needs to check if the data D is correct (belongs to some fixed set). It is by definition correct if our trusted server checks it and decides it's correct. ...
31 views

Rules Governing Duplicate, Repeated Characters While Encrypting Plaintext to Ciphertext

What is the general rule if there is one that allows the encryption of a plaintext message to ciphertext message to be able to mask duplicate or repeated letters in the plaintext. This is an arbitrary ...
66 views

How is it that homomorphic encryption can encrypt program code and run it without decryption?

In my journey of interest in the world of homomorphic encryption has led me to a concept floating around the internet where they describe homomorphic encryption being used with "mobile agents&...
49 views

Is the "grain" in this converted image indicative of Steganography?

I'm checking an image in every way I can for steganography. I've checked the file signature, compared it to it's original source and extracted the pixels, many methods but nothing's coming up. ...
134 views

Randomness Testing of Block Ciphers with 256-bit Block/ Key length

NIST explained the process of "Randomness Testing of the AES Candidate Algorithms" in the document. The document explains the generation of 9 datasets for AES candidates with 128-bit block ...
57 views

Bitcoin ECDSA signature

I am trying to use the ecdsaSign function in ecdsa.c of https://github.com/kvhnuke/Ethereum-Arduino/tree/master/Ethereum-Arduino/libs which is based on the files in the repo https://github.com/...
94 views

Exponentiation Problem of G2 in MNT curve

I made a simple python program in the Charm framework (https://github.com/JHUISI/charm): ...
69 views

Security of CCM using 8 byte MAC within TLS

In the Dutch "IT Security Guidelines for Transport Layer Security (TLS)" the ciphersuites using AES-128-CCM_8 (i.e. CCM with a 64 bit authentication tag) are considered "insufficient&...
143 views

Probability of collision when we use a particular part of sha 256 hashed value

So I was supposed to use hash some co-ordinates and I was supposed to use k 3-wise independent hash functions in order for the mathematical explanations behind that algorithm to be hold. But after ...
330 views

How do you verify that an address is related to a private key

This is my first post. My interest for cryptography is exclusively motivated by cryptocurrencies. My question is: If I generate some keys, how do I actually verify that the address is indeed ...
62 views

Can I use zero-knowledge proofs on pre-image of symmetric encryption?

Let $e_x$ be a symmetric encryption function in regards to key $x$. Let $y_1 = e_1(x_1), y_2 = e_2(x_2)$. My goal is to prove that: $$x_1 = x_2$$ Is there a way of proving this using ZKP? I can't seem ...
89 views

Is there a relation between the private keys of secp256k1 public keys of opposite parities?

From observation, 32 bit public key values of opposite parities are either both valid, or both invalid. ...
130 views

"16-bit DES encryption algorithm"

I need to use encryption software from PSpice for my SPICE model. In a user guide on page 71 they claim to use a "16-bit DES encryption algorithm". According to the wiki DES is using a 64-...
60 views

is it safe to do public key to public key derivation with Ed25519?

Deriving a public key from a public key in Ed25519 is possible, some algorithms are available. My question is why there are so few implementations compared to secp256k1 for example. The extra checks ...
91 views

Client-Side Encryption for a small app

I'm designing a small personal journal web application for my wife. I'm a crypto newb, but I want her to feel secure knowing only she will have access to her journal entries. I am thinking of the ...
31 views

Where can I find references to the theory behind PBC library?

I don't know if this is the right place to ask this type of question. Anyway, I'm using PBC library for a project, but I'm a very newbie for what concerns pairing based cryptography. Then I ask some ...
197 views

Fast Extended Euclidean Algorithm in Harley's elliptic curves point counting method

Could you help me with Harley's norm computation algorithm that is based on the Fast Extended Euclidean Algorithm that was suggested by Harley in an email to NMBRTHRY list in 2002 and that described ...
42 views

Binomial distribution sampling - concrete example

Can anyone give me an explicit example of how one can samples from the binomial distribution defined in NewHope's paper? What is the difference of sampling from rounded Gaussian in practice?
45 views

How to justify the lightweight symmetric PRESENT encryption algorithm is more secure?

My domain is VLSI design, currently, I'm working on PRESENT Lightweight cryptographic algorithm. I want to know how to improve the security of the algorithm rather than increasing bit size? Is there ...
39 views

52 views

Security implication of concatenating two hashes using different algorithms

Background Hashing files is an expensive thing for CPU. I am tasked to write a secure digital signature scheme. For that, I decided to check the integrity of files using Hash/Digest. To be more secure,...
34 views

How to prove properties of pre-image of random oracle in zero-knowledge proof?

A signature Sig is given as input to random oracle H, such that y = H(Sig) and Sig should be hidden from the verifier. How to prove in zero-knowledge to the verifier that y is the correct output from ...
59 views

RNG randomization strength for PRF seed

Consider a use case that requires the creation of multiple asymmetric key pairs. There are two options for generating random seeds for a PRF: Use a software based RNG and generate a new seed for each ...
127 views

Prior art: SSH key authn over TLS?

I’m developing an application that runs over TLS. In addition to password-based authentication we’d like to be able to use SSH keys. Is there any prior art in using SSH keys for authentication over ...
84 views

RSA How many value for d

How many value can have a private key with this format? p,q,d = (19, 41, d) where 1< d <18x40? I want know how to calculate that.
39 views

How to estimate the computation overhead of ECDSA?

I am using ECDSA as a digital signature scheme. Using Charm, I got the timing for the multiplication, exponentiation, and pairing operations; they take 0.005, 9, and 4.4 ms respectively. I want to ...
26 views

Could someone please explain the implementation of public-private key encryption for storing passwords?

As someone new to cryptography,I have a question about how logins work on websites. I understand mathematically how asymmetric encryption works and how https web requests work to securely send ...
83 views

RNG to hide some bits

Suppose I have a sequence of bits of length M. I need to hide N out of M bits (hiding means forcing them to be 0) using RNG with a key. How I can relate the output of RNG to the number and positions ...
58 views

Which public-key cryptosystems are used the most?

Does anybody know if there is some kind of measure on how often public-key cryptosystems like El Gamal, RSA,... are implemented. Which ones are most common?
51 views

Attack on Many Time Pad

I have 7 ciphertexts that have been XORed with the same key. I'm writing a program to figure out what the plaintexts are and possibly maybe recover the key. I have managed to convert the HEX ...
87 views

Authentication using a nonce

For an authentication problem imagine the following scenario with two devices: 1 server 1 client. The client starts a conversation with the server and sends him his public key. All public keys in ...
60 views

How to design number of rounds in my cipher?

I have specific cipher which is built from permutations. It has or should has few rounds. If we do 2 rounds it is like 2 permutation composition. 3 rounds are like composition of 3 permutations and so ...
75 views

Why cant we use AES to hash a password, instead of a hash function?

AES needs a key in order to work, hashing-algorithms do not. Suppose we have a fixed key for AES, why don't we simply hash our keys with that? As with hash functions, AES has arbitrary input size, ...