Rodrigo
  • Member for 5 years, 3 months
  • Last seen more than a month ago
1 answers
11 votes
954 views
2 bookmarks
Why are elliptic curves over a field of characteristic 2 or 3 insecure?
3 answers
7 votes
8k views
4 bookmarks
Find the generators of multiplicative group of units efficiently?
1 answers
6 votes
159 views
2 bookmarks
Why do Edwards curves protect against side-channel attacks?
1 answers
5 votes
2k views
1 bookmarks
Forgery attack for Merkle–Damgård MAC scheme with prefix method
1 answers
5 votes
2k views
1 bookmarks
Why is it claimed that ElGamal is worse than RSA?
1 answers
4 votes
393 views
2 bookmarks
Proving von Neumann extractor correct
1 answers
4 votes
117 views
Partition attack on the possible values of RSA modulus
1 answers
4 votes
211 views
Can you help me understand this exam answer related to “breaking discrete logarithm over P256”?
2 answers
4 votes
875 views
1 bookmarks
Break RSA when modulus is of the form $N = pq$ with $|q^2 - p|$ small
1 answers
4 votes
574 views
1 bookmarks
Probability of Fermat test going wrong
1 answers
3 votes
146 views
In RSA, what is $P[x \notin \mathbb{Z}_N^*]$
1 answers
3 votes
234 views
Elgamal problem on $\mathbb{QR}_p$ with $p$ a safe prime
1 answers
3 votes
865 views
What is meant by domain separation in the context of KDF?
1 answers
3 votes
127 views
Is tweakable block-cipher based on the Merkle-Damgård construction secure if $F$ is a PRP
1 answers
3 votes
357 views
1 bookmarks
Can we use a PRF as a PRP?
1 answers
3 votes
790 views
2 bookmarks
Polynomial sum of negligible functions need not be negligible
1 answers
3 votes
115 views
Does WEP protect message authenticity?
1 answers
2 votes
120 views
If DDH is hard then CCA-secure PKES exist?
1 answers
2 votes
112 views
If TDP exist then CCA-secure PKES exist?
1 answers
2 votes
114 views
Padding schemes reversal and space efficiency
1 answers
2 votes
143 views
Formal verification of elliptic curves. Depence on the equation form
1 answers
1 votes
158 views
A modification of the Blum-Micalli construction
1 answers
1 votes
101 views
1 bookmarks
On the probability of a collision in RFO-rCTR
1 answers
1 votes
109 views
1 bookmarks
Give a distinguisher to differentiate between PRP and RPO
1 answers
1 votes
262 views
1 bookmarks
Show that CPA-security implies security against plaintext recovery
0 answers
1 votes
89 views
A modification of the NMAC construction
1 answers
1 votes
336 views
Proof one-time pad is perfectly secret with eavesdropping game definition
1 answers
1 votes
331 views
Give a CPA-attack on Elgamal when used with $\mathbb{Z}_p^*$
2 answers
1 votes
330 views
On a lower bound for the birthday problem
1 answers
1 votes
82 views
1 bookmarks
PRGs exist if computationally secret encryption schemes exist