User Aydin

3 votes

3 answers

1k views

Truncating the output of AES-128

asked Feb 20, 2019 at 14:47

1 vote

1 answer

662 views

The role of IV when AES is used as $PRF$

asked Mar 7, 2019 at 11:33

2 votes

0 answers

635 views

Performance of Fully homomorphic encryption VS Paillier encryption in Practice

asked Oct 5, 2015 at 19:11

4 votes

1 answer

488 views

A hash-based pseudorandom function

asked Jul 12, 2019 at 9:57

7 votes

1 answer

478 views

What is the shortest ciphertext size output by FHE?

asked Feb 18, 2019 at 12:57

1 vote

1 answer

328 views

Is there any non-interactive zero knowledge proof for Diffie-Hellman tuples

asked Nov 7, 2017 at 19:46

1 vote

1 answer

265 views

How to compare one time pad security and efficiency with AES?

asked Jan 21, 2019 at 16:53

2 votes

0 answers

258 views

Rewinding techniques with some examples

asked Apr 24, 2018 at 16:04

0 votes

3 answers

194 views

How to encrypt a message such when a certain condition is met it can be decrypted?

asked Nov 30, 2017 at 15:11

0 votes

1 answer

180 views

Is the hash-based commitment IND-CPA?

asked Apr 8, 2020 at 13:06

0 votes

3 answers

173 views

Are the shares of Shamir secret sharing uniformly distributed random numbers?

asked Sep 6, 2021 at 18:40

0 votes

1 answer

150 views

Can we prove $(a,b,c,d)$ is of form $(g,g^x,g^y,g^{xy})$ without knowing $\phi (N)$?

asked Dec 12, 2017 at 11:25

1 vote

1 answer

143 views

Does semi-honest adversary eavesdrop honest parties communication?

asked Apr 25, 2018 at 19:12

2 votes

1 answer

124 views

Entropy of a random message chosen by an adversary from a subdomain

asked Feb 11, 2019 at 12:37

0 votes

1 answer

102 views

Analysing communication complexity of a protocol

asked Feb 18, 2018 at 15:47

1 vote

0 answers

95 views

Generating a MAC on a Polynomial

asked Oct 17, 2019 at 15:41

1 vote

0 answers

88 views

Universal composability: Can an ideal functionality call other ideal functionalities?

asked Oct 3, 2020 at 17:46

2 votes

1 answer

87 views

Why do we need multiple adversaries in a game-based definition?

asked Oct 18, 2020 at 17:51

2 votes

0 answers

65 views

Merkle tree-based PoR

asked Nov 4, 2020 at 19:26

1 vote

0 answers

45 views

Privacy preserving functions vs secure multi-party computation

asked Jan 15, 2022 at 14:32

0 votes

0 answers

44 views

What is a quantifier in game-based definitions?

asked Oct 19, 2020 at 10:10

Stack Exchange Network

21 Questions

Truncating the output of AES-128

The role of IV when AES is used as $PRF$

Performance of Fully homomorphic encryption VS Paillier encryption in Practice

A hash-based pseudorandom function

What is the shortest ciphertext size output by FHE?

Is there any non-interactive zero knowledge proof for Diffie-Hellman tuples

How to compare one time pad security and efficiency with AES?

Rewinding techniques with some examples

How to encrypt a message such when a certain condition is met it can be decrypted?

Is the hash-based commitment IND-CPA?

Are the shares of Shamir secret sharing uniformly distributed random numbers?

Can we prove $(a,b,c,d)$ is of form $(g,g^x,g^y,g^{xy})$ without knowing $\phi (N)$?

Does semi-honest adversary eavesdrop honest parties communication?

Entropy of a random message chosen by an adversary from a subdomain

Analysing communication complexity of a protocol

Generating a MAC on a Polynomial

Universal composability: Can an ideal functionality call other ideal functionalities?

Why do we need multiple adversaries in a game-based definition?

Merkle tree-based PoR

Privacy preserving functions vs secure multi-party computation

What is a quantifier in game-based definitions?