New answers tagged key-exchange
1
Yes. The general construction is called IES (Integrated Encryption Scheme), most often practiced as ECIES (elliptic curve IES). The principle is the same: use the “key agreement” primitive (DH, ECDH, X25519, …) to construct a secret that is shared by two parties, each of which knows both sides' public keys but only their own private key. The shared secret is ...
answered Jun 18 at 10:46
Gilles 'SO- stop being evil'
12.5k3 gold badges34 silver badges67 bronze badges
0
I want to use lwe estimator too. But same as you, I can't find any explainations about this. So I search the source code.
The most important fuction is lattice_reduction_cost() tell you the cost for lattice_reduction.
def lattice_reduction_cost(cost_model, delta_0, d, B=None):
"""
Return cost dictionary for returning vector of norm` δ_0^d Vol(...
0
Yes, using identity-based cryptography; in particular the Sakai-Ohgishi-Kasahara non-interactive key distribution protocol, generalized in "Provably secure non-interactive key distribution based on pairing".
The downside is that it requires a "Private Key Generator", a trusted party which is able to compute the private key of any node. The private keys also ...
4
Why can't you encrypt a message with a public key generated via ECC?
Well, for starters, you need to realize that ECC is a collective term for a number of protocols that use elliptic curves to do cryptography. Some of these protocols (ECIES, ECElGamal) are public key encryption methods (that is, they have a public encryption key, and the private ...
0
Technically you can. It's theoretically possible to use ElGamal with any elliptic curve group where the decisional Diffie-Hellman assumption holds. An appropriate padding scheme would need to be devised to provide security under chosen ciphertext attack, which is difficult to do correctly. In practice, this would be slow and error-prone, just like RSA ...
Top 50 recent answers are included
