Skip to main content
Cryptography
xagawa's user avatar
xagawa's user avatar
xagawa's user avatar
xagawa
  • Member for 12 years, 7 months
  • Last seen more than a month ago
Profile Activity

34 Answers

Score Activity Newest
15 votes
Accepted

What does "Worst-case hardness" mean in lattice-based cryptography?

15 votes
Accepted

Help in understanding exactly how lattices are used as one-way functions for hashing

12 votes
Accepted

Homomorphic Encryption and Semantic Security using Lattices?

10 votes
Accepted

Zero-knowledge proof using quadratic residue: why two options?

9 votes
Accepted

Goldreich-Goldwasser-Micali Construction

8 votes
Accepted

Can we proxy-re-encrypt using homomorphic encryption schemes?

7 votes
Accepted

PRP, PRF and modular arithmetic

7 votes
Accepted

Security proof of FO(Fujisaki-Okamoto) hybrid encryption

7 votes

Discrete log problem, when we have many examples

7 votes
Accepted

Fully Homomorphic Encryption over the Integers - Runtime Question

6 votes
Accepted

Distributed Asymmetric Key Decryption with threshold

6 votes

How many bits can be safely extracted from the BBS generator at each step?

6 votes

Given a message and signature, find a public key that makes the signature valid (ECDSA)

6 votes
Accepted

Randomness re-use in LWE encryption scheme

5 votes
Accepted

FHE over the Integers - reduction to approximate gcd problem

5 votes
Accepted

Proof of the standard pseudorandom generator + XOR encryption scheme in Goldreich

4 votes
Accepted

Several questions about Paillier cryptosystem

4 votes

What is the impact of the Goppa code distinguisher on the CFS and McEliece?

4 votes

Reductionist proofs of computational problems to decisional

3 votes
Accepted

Fiat-Shamir for $(2n + 1)$

3 votes

Key construction in the Full Cramer-Shoup cryptosystem

3 votes
Accepted

Questions on rank-attacks in Multivariate Cryptography

2 votes

Zero-Knowledge Challenge-Responce Protocol

2 votes
Accepted

Current Status of mixnets for voting

2 votes
Accepted

Bandwidth and block size for Paillier cryptosystem

2 votes

Is there an encyption scheme that combines additive homomorphism with ability to proxy re-encrypt?

2 votes
Accepted

Kyber-CCA-KEM - Deterministic implicit rejection

2 votes
Accepted

Proving that two points on elliptic curve are within range

2 votes

How can one encrypt with RSA (or ElGamal) without revealing whom the ciphertext is intended for?

1 vote
Accepted

What are monotonic and non monotonic access structures in ABE ?

1
2