New answers tagged public-key
0
votes
Understanding Practical Differences Between ElGamal and Diffie-Hellman
in ElGamal you use an additional variable K which is different for each message. you don't run the algorithm from scratch again for every new message.
- 101
0
votes
Is it possible to uses large partial private key exposure to recover the ecdsa nonce?
I assume the public key is available (as public implies). If it was not, it's easy to recover within 1 bit from one (message, signature) pair using the ECDSA Public Key Recovery Operation; and it's ...
- 145k
8
votes
Is it possible to add arbitrary amounts of quantum resistance cheaply?
No, for the reasons indicated in the other answer to this question.
But I want to point out a partial stopgap measure when it comes to signature: using Schnorr groups with large parameter $p$ (e.g. ...
- 145k
5
votes
Is it possible to add arbitrary amounts of quantum resistance cheaply?
There is no way to do this.
Under Shor's attack the Discrete Logarithm in a group of size $2^n$ has quantum complexity $\mathrm{poly}(n).$
If we consider extending the bitlength by $n^c$ bits as $O(n^...
- 23.7k
Top 50 recent answers are included