New answers tagged

2

Should I always call the key used for verification "public key" even on those settings? Usually it is a public key, or at least it is called that in the key pair generation procedure of the cryptosystem that is used. Public key is in that case a more generic term - it may not be decided for what the key will be used after all. Similarly, cryptographic API'...


1

A paper was published in 2015 describing a scheme called Anonize to do just that. It appears to be constructed around a specially designed Non-Interactive Zero-Knowledge Proof of Knowledge (NIZKPoK) protocol used by clients. First, a registration is made, whereby a client sends a commitment to a seed of a pseudo-random function. Sent back to it by the ...


0

Messages 4 and 5 are meant to protect the recipient B from a replay attack. It is a basic challenge response mechanism. Otherwise an attacker could just replay previous messages and have the very same interaction with B again. That is bad, if e.g. the message is just "increase some counter", or another message that has a lasting effect or changes a state. ...


Top 50 recent answers are included