pa5h1nh0's user avatar
pa5h1nh0's user avatar
pa5h1nh0's user avatar
pa5h1nh0
  • Member for 8 years, 8 months
  • Last seen more than a month ago
11 votes
1 answer
3k views

CPA-security of a pseudorandom permutation encryption scheme

7 votes
2 answers
8k views

How to prove that a function is not pseudorandom?

5 votes
2 answers
6k views

How to formally prove that a given hash construction is collision resistant or not?

3 votes
2 answers
3k views

Knowing that $G(s)$ is a PRG, is the following construction $G'(s) = G(s||0)$ a PRG?

3 votes
3 answers
2k views

Let $F$ be a PRF, is the following $G(x)=F_{0…0}(x)∥F_{0…1}(x)|| ... ||F_{1…1}(x)$ a PRG?

3 votes
0 answers
134 views

Proving existence of an encryption scheme that has indistinghuishable multiple encryptions in the presence of an eavesdropper, but is not CPA-secure [duplicate]

2 votes
1 answer
382 views

Modified version of a CPA-secure encryption scheme

2 votes
1 answer
1k views

Why the $IV$ used in Merkle–Damgård has to be fixed to a specific value?

2 votes
0 answers
764 views

Ciphertext size of any CPA-secure public-key encryption scheme

1 vote
0 answers
364 views

CPA-security proof of "l-padded RSA" encryption scheme

0 votes
3 answers
5k views

Let $G$ be a PRG. Are the following $G'$ constructions based on $G$ necessarily PRGs?

-1 votes
1 answer
915 views

RSA problem - how to find $d$ [duplicate]