User Daniel

10 votes

5 answers

1k views

Are there any applications of Quantum Computation to Cryptography? (besides Cryptanalysis)

asked Apr 12, 2017 at 21:07

9 votes

1 answer

7k views

What does it mean for an adversary to run in PPT?

asked Jun 21, 2014 at 17:09

8 votes

1 answer

3k views

An unpredictable PRG is secure (Theorem Yao'82)

asked Jul 8, 2014 at 0:02

8 votes

2 answers

3k views

How do we compute IV+1 in CTR mode?

asked Jul 21, 2014 at 15:15

8 votes

1 answer

2k views

CPA-security of CTR mode

asked Jan 2, 2017 at 13:20

8 votes

1 answer

199 views

How would Private-key Cryptography be if we use quadratic polynomials as OWF's?

asked Mar 11, 2017 at 11:20

8 votes

2 answers

2k views

What is modulo switching, in a nutshell?

asked Dec 30, 2018 at 22:59

7 votes

3 answers

234 views

How to determine the layers of a circuit?

asked Sep 19, 2018 at 20:42

7 votes

1 answer

1k views

Can we use a sort of "hash" function in CTR mode instead of a block cipher? [duplicate]

asked Jul 8, 2016 at 1:02

5 votes

2 answers

311 views

$t$-out-of-$n$ Secret Sharing over $\Bbb Z_2$?

asked Jul 17, 2018 at 8:46

5 votes

2 answers

2k views

Property of negligible functions

asked Mar 10, 2018 at 15:16

4 votes

2 answers

293 views

Are there any additively homomorphic encryption schemes over $\Bbb Z_2$ besides Goldwasser-Micali?

asked Jul 15, 2018 at 21:20

4 votes

1 answer

73 views

Is there a problem in a PK cryptosystem if the plaintexts are very small compared to the ciphertexts?

asked Jul 7, 2016 at 19:54

4 votes

1 answer

956 views

Indistinguishable encryptions in the presence of an eavesdropper equivalence

asked Jun 26, 2014 at 13:04

4 votes

0 answers

124 views

Applications of ZK proofs without proof of knowledge?

asked Aug 7, 2022 at 17:38

3 votes

1 answer

373 views

MPC protocols in plain/CRS/PKI models

asked Jun 8, 2020 at 13:51

3 votes

0 answers

64 views

What is the cost of emulating ring arithmetic (say modulo $2^k$) over a prime finite field?

asked Sep 30, 2021 at 11:49

3 votes

1 answer

56 views

Solutions to $\gamma \equiv \sum_{i=1}^m \xi_i\cdot x_i\bmod p$ with $|x_i| < \ell$

asked Dec 16, 2018 at 19:48

3 votes

2 answers

225 views

Choices of $q$ and $f$ for RLWE-based constructions

asked Oct 17, 2019 at 20:11

2 votes

1 answer

196 views

Where was the stand-alone model for simulation-based MPC proposed first?

asked Nov 3, 2019 at 15:57

2 votes

1 answer

258 views

Relevance of Input and Ouput size of PRF on CTR mode

asked Jan 3, 2017 at 0:18

1 vote

1 answer

59 views

What are the benefits of being able to choose (most of) the public key in a PKC?

asked Jul 8, 2016 at 23:00

Stack Exchange Network

22 Questions

Are there any applications of Quantum Computation to Cryptography? (besides Cryptanalysis)

What does it mean for an adversary to run in PPT?

An unpredictable PRG is secure (Theorem Yao'82)

How do we compute IV+1 in CTR mode?

CPA-security of CTR mode

How would Private-key Cryptography be if we use quadratic polynomials as OWF's?

What is modulo switching, in a nutshell?

How to determine the layers of a circuit?

Can we use a sort of "hash" function in CTR mode instead of a block cipher? [duplicate]

$t$-out-of-$n$ Secret Sharing over $\Bbb Z_2$?

Property of negligible functions

Are there any additively homomorphic encryption schemes over $\Bbb Z_2$ besides Goldwasser-Micali?

Is there a problem in a PK cryptosystem if the plaintexts are very small compared to the ciphertexts?

Indistinguishable encryptions in the presence of an eavesdropper equivalence

Applications of ZK proofs without proof of knowledge?

MPC protocols in plain/CRS/PKI models

What is the cost of emulating ring arithmetic (say modulo $2^k$) over a prime finite field?

Solutions to $\gamma \equiv \sum_{i=1}^m \xi_i\cdot x_i\bmod p$ with $|x_i| < \ell$

Choices of $q$ and $f$ for RLWE-based constructions

Where was the stand-alone model for simulation-based MPC proposed first?

Relevance of Input and Ouput size of PRF on CTR mode

What are the benefits of being able to choose (most of) the public key in a PKC?