Skip to main content
István András Seres's user avatar
István András Seres's user avatar
István András Seres's user avatar
István András Seres
  • Member for 8 years, 1 month
  • Last seen this week
5 votes
Accepted

Can future Bitcoin hashes be considered a good source to generate random numbers?

5 votes
Accepted

Probability of a prime number of points on an elliptic curve over a prime field

5 votes
Accepted

Is this pairing-based signature scheme secure?

5 votes

Proving the knowlege of e-th root in an non-interactive way

5 votes
Accepted

What would be the degree (or range of the degree) of the polynomial used in real life zkSnarks as used in blockchains?

4 votes
Accepted

Hidden order groups any pointers to reading material?

3 votes
Accepted

Is this an error in the Pinocchio Protocol paper

2 votes

Relations between RSA and Generalized Diffie-Hellman (GDH), factoring and GDH

2 votes

Modified ElGamal encryption (ElGamal encryption with messages in the exponent ) is implemented in a pairing friendly elliptic curve. Is it secure?

2 votes

Zero knowledge proof for GCD

2 votes

Inclusion and Exclusion proofs in RSA accumulators

2 votes

RSA Accumulators with auxiliary information or known trapdoor information

2 votes

Challenges of Fiat-Shamir Transformation of ZK Proof / Sigma Protocol

1 vote

In zkSNARKS, does R1CS require every step of the calculation, or just statements which confirm the calculation was performed correctly?

1 vote

RSA accumulator exclusion proof without set

1 vote

Security analysis for a extended ElGamal Signature against selective unforgeability

1 vote

How to determine if a protocol is a Zero knowledge proof

1 vote

Let (P, V) be any ZK protocol, then the protocol is WI. --> help with proof

1 vote
Accepted

Zero-Knowledge Proof of Equality between RSA Modulus and Prime Order Group

1 vote
Accepted

Sigma proofs for Pedersen commitments arithmetic under different bases

1 vote

Is there a way to optimize a linear scan while preserving anonymity?

1 vote
Accepted

What is a practical application of evaluating at a point in the Kate Polynomial Commitment Scheme?

1 vote

Verifying dealer parameters in 1-2 oblivious transfer

1 vote

Can zksnark prove DLP?

1 vote

What is blindness and forgeability in Chaum's blind signature scheme?

1 vote

How to derive a 4096 bit or 8192 bit RSA private key from a (BIP39) mnemonic seed?

1 vote
Accepted

Are Fujisaki commitments binding if the factorization of the group is known?

1 vote
Accepted

MuSig/Schnorr key aggregation: How get the combined private key

1 vote
Accepted

Dynamic accumulator with only non-membership witness

1 vote
Accepted

Honest Verifier Zero-Knowledge Game for Sigma Protocols