Skip to main content
3 votes
Accepted

P, Q, and G values in a public key

It is the DSA where $(p,q,g)$ are public values. It is defined in FIPS 186-4 but not defined in FIPS 186-5. The $p$ and $q$ primes of lengths, respectively; L = 1024, N = 160 L = 2048, N = 224 L = ...
kelalaka's user avatar
  • 49k
3 votes
Accepted

The post-quantum public keys are long. Is it secure to map sha512 to a public key?

is it a reliable thing to map a SHA512 of Rainbow-1 or GEMMS128 public key to such key, to prevent transfer of such huge keys with every message or file transferred? Well, the verifier would need to ...
poncho's user avatar
  • 148k
2 votes

Why do we need more security than the private key distribution?

You never, never, ever send a private key. A private key should be generated by your device. And then it should stay on your device forever and never leave it. You use the private key to create as ...
gnasher729's user avatar
  • 1,272
2 votes
Accepted

Why do we need more security than the private key distribution?

If we can send a key to just one person and others cannot see it, then why should I think about more security? Indeed, if we can safely distribute a private key, than we do not need more security (in ...
fgrieu's user avatar
  • 142k
2 votes

Why do we need more security than the private key distribution?

In cryptography, most of the times we care about public key cryptography. Having a private key distribution is something unachievable in most cases. Indeed, as you said, if we had private key ...
Alex Them's user avatar
  • 322
2 votes

The post-quantum public keys are long. Is it secure to map sha512 to a public key?

It's worth mentioning that certain schemes are known to have smaller public keys. In particular, isogeny-based crypto typically can achieve public keys $\leq 100$ bytes, and not all of it was broken ...
Mark Schultz-Wu's user avatar
  • 13.5k
1 vote
Accepted

Forgeable and unconfidential short-term signature

I see a problem with the wording of this requirement: Private key safety (needed): It should be practically impossible to derive the private key from many plaintext & signature pairs. That's not ...
fgrieu's user avatar
  • 142k
1 vote

E-voting using Paillier encryption scheme: security risks

In the question's setup: Each voter puts his encrypted vote on a webpage and when all votes are online, the voting authority adds these votes up by using that the Paillier cryptosystem is additively ...
fgrieu's user avatar
  • 142k
1 vote

Is it possible for seed phrases to collide?

"by brute-forcing the seed bit by bit over 64 bytes". If the seed is random enough then this is not possible. You would have 512 bits to brute force, which would take $2^{511}$ tries on ...
Maarten Bodewes's user avatar
  • 93.2k
1 vote

Getting the slope of a public key given its x and y coordinates

Since you are talking about ECC and we are in a crypto stack exchange, I suppose you define your elliptic curve over a finite field, lets say $\mathbb{F}_q$. Here is a tool that lets you plot elliptic ...
Alex Them's user avatar
  • 322
1 vote
Accepted

Effects of and prevention of leaking a private key in an public key encryption scheme

Effects on public key encryption It's simple. In an encryption scheme we'd loose all confidentiality to those attackers that: have access to the ciphertext and; have gained access to the private key. ...
Maarten Bodewes's user avatar
  • 93.2k
1 vote

P, Q, and G values in a public key

If you look above you'll see DSA, which is a signature algorithm, meaning you get to sign using the private key, hence to verify the digest according to RFC 3279 you should be able to use a public ...
1r4c2's user avatar
  • 11

Only top scored, non community-wiki answers of a minimum length are eligible