User djao

13 votes

Accepted

Discrete Gaussian Sampling role in Lattice-Based Crypto?

answered Jun 9, 2018 at 23:55

8 votes

Accepted

SIKE: choice of n

answered May 24, 2018 at 17:05

5 votes

Accepted

Why are computations (isogeny) in SIDH done in an extended prime field?

answered Oct 18, 2018 at 21:44

4 votes

Accepted

SIDH cryptosystem question

answered May 31, 2019 at 16:43

4 votes

SIDH: key agreement - why does it work?

answered Jun 16, 2019 at 2:59

4 votes

Accepted

SIKE as Diffie-Hellman exchange

answered Jun 1, 2020 at 17:25

3 votes

Calculation of the order of the cosets used in defining the Tate Pairing

answered Aug 30, 2019 at 19:56

3 votes

Elliptic Curve Crypto, is a distributed signing method possible using Shamir's Secret Sharing?

answered Jul 2, 2014 at 17:19

2 votes

Post-quantum alternative to ElGamal? (public key verifiability)

answered Jul 1, 2019 at 20:05

2 votes

Can $y^2=x^3-x+1$ elliptic curve with $GF(3^m)$ where $m=97$ be used for Diffie Hellman key exchange?

answered Jan 16, 2021 at 14:32

2 votes

Accepted

How to calculate the order of secp256k1?

answered Aug 22, 2021 at 5:02

1 vote

Boss insists on storing SHA2(p) || SHA3(p), claiming it "doubles security"

answered Feb 4 at 3:02

1 vote

Accepted

Message mapping to elliptic curve in BLS signature

answered Sep 18, 2020 at 1:25

1 vote

Importance of supersingularity of elliptic curves

answered Sep 18, 2020 at 1:33

1 vote

Post-quantum X3DH

answered Sep 17, 2018 at 4:56

1 vote

MOV attack when $E(\mathbb{F}_q)$ is cyclic

answered May 9, 2020 at 12:39

1 vote

State of the art in zero knowledge proof compilers?

answered Feb 2, 2014 at 14:08

1 vote

Accepted

Wrong Miller's Weil Pairing implementation?

answered May 25, 2018 at 21:35

0 votes

Why aren't Complex number fields used in cryptography?

answered Jun 8, 2019 at 1:52

0 votes

Using the same private key to generate Schnorr and BLS signatures

answered Sep 9, 2018 at 1:06

0 votes

Why do elliptic curves require fewer bits for the same security level?

answered Aug 5, 2019 at 21:40

-2 votes

Why is the vector sampled from Gaussian or Subgaussian distribution in lattice-based cryptography?

answered Aug 12, 2019 at 15:00

-3 votes

Accepted

Ring-LWE in other fields

answered Aug 24, 2020 at 11:32

Stack Exchange Network

23 Answers

Discrete Gaussian Sampling role in Lattice-Based Crypto?

SIKE: choice of n

Why are computations (isogeny) in SIDH done in an extended prime field?

SIDH cryptosystem question

SIDH: key agreement - why does it work?

SIKE as Diffie-Hellman exchange

Calculation of the order of the cosets used in defining the Tate Pairing

Elliptic Curve Crypto, is a distributed signing method possible using Shamir's Secret Sharing?

Post-quantum alternative to ElGamal? (public key verifiability)

Can $y^2=x^3-x+1$ elliptic curve with $GF(3^m)$ where $m=97$ be used for Diffie Hellman key exchange?

How to calculate the order of secp256k1?

Boss insists on storing SHA2(p) || SHA3(p), claiming it "doubles security"

Message mapping to elliptic curve in BLS signature

Importance of supersingularity of elliptic curves

Post-quantum X3DH

MOV attack when $E(\mathbb{F}_q)$ is cyclic

State of the art in zero knowledge proof compilers?

Wrong Miller's Weil Pairing implementation?

Why aren't Complex number fields used in cryptography?

Using the same private key to generate Schnorr and BLS signatures

Why do elliptic curves require fewer bits for the same security level?

Why is the vector sampled from Gaussian or Subgaussian distribution in lattice-based cryptography?

Ring-LWE in other fields