User satya

14 votes

1 answer

1k views

What is complexity leveraging

asked Oct 17, 2016 at 10:47

12 votes

3 answers

2k views

Examples of protocols that are insecure when run concurrently

asked Jun 16, 2019 at 13:37

9 votes

1 answer

1k views

Difference between somewhat homomorphic encryption and leveled homomorphic encryption?

asked Oct 30, 2016 at 3:55

9 votes

2 answers

5k views

How to efficiently generate a random safe prime of given length?

asked Dec 24, 2018 at 14:25

6 votes

1 answer

1k views

What is difference between Zero Knowledge proof and Zero Knowledge Proof of Knowledge?

asked Apr 15, 2019 at 10:09

5 votes

2 answers

260 views

MPC protocols for high school kids

asked Apr 29, 2019 at 18:29

5 votes

1 answer

360 views

What is straight line black box reduction?

asked Nov 13, 2016 at 10:15

4 votes

1 answer

1k views

Why is Diffie-Hellman Insecure If Order of the Generator Has Only Small Prime Factors?

asked Dec 27, 2018 at 14:37

4 votes

0 answers

367 views

What is Frobenius map of an elliptic curve?

asked Dec 1, 2018 at 17:15

4 votes

1 answer

1k views

What does the number 256 in pairing curve BN256 indicate?

asked May 24, 2019 at 14:08

4 votes

2 answers

812 views

Implementing randomness extractors

asked Dec 20, 2018 at 15:57

3 votes

1 answer

4k views

Naming convention for NIST elliptic curves in OPENSSL

asked May 30, 2019 at 13:20

3 votes

0 answers

117 views

Impossible to construct collision resistant hash function from one way function

asked Mar 21, 2019 at 18:00

3 votes

0 answers

225 views

What are the known attacks on $\phi$-hiding assumption? How to chose its parameters?

asked Dec 19, 2018 at 14:02

3 votes

1 answer

303 views

Does choosing N to be product of safe primes avoid William's p+1 factoring attack on RSA?

asked Dec 20, 2018 at 0:01

3 votes

1 answer

738 views

Why is garbled circuit a randomized encoding?

asked Feb 3, 2017 at 9:17

3 votes

2 answers

603 views

Is fixed key AES in counter mode a PRG?

asked Apr 26, 2017 at 8:51

3 votes

1 answer

193 views

Complexity leveraging in case of exponentially many hybrids

asked Jan 4, 2018 at 17:36

2 votes

1 answer

154 views

Does DDH hold in $Z_N^*$ where N is product of 2 large primes

asked Dec 12, 2018 at 11:49

2 votes

1 answer

285 views

Constructions of PRF (Pseudo Random Function)

asked Apr 26, 2019 at 17:50

2 votes

0 answers

155 views

Intuition for Cramer Shoup Encryption Scheme?

asked Jun 15, 2019 at 19:25

2 votes

1 answer

274 views

Problem with Fiat-shamir on poly-round interactive protocol?

asked Aug 7, 2019 at 19:03

1 vote

1 answer

872 views

Example of a universal one-way hash function that is not collision resistant hash function

asked Nov 7, 2020 at 18:05

1 vote

0 answers

52 views

Multiparty computation on circuits that perform group operations

asked Mar 30, 2021 at 17:40

1 vote

1 answer

493 views

Do q-ary lattices have parallelogram kind of structure?

asked Jul 19, 2019 at 22:22

1 vote

1 answer

199 views

Are there any NIST curves with pairings?

asked May 4, 2019 at 23:29

1 vote

1 answer

159 views

Is there a concept of embedding degree for non-pairing based elliptic curves?

asked May 24, 2019 at 13:58

1 vote

1 answer

340 views

NIST elliptic curves behaving anamolous in OPENSSL benchmark

asked May 30, 2019 at 13:27

1 vote

2 answers

187 views

Complexity of number field sieve theorem does not match with security of elliptic curves

asked Jun 6, 2019 at 16:17

1 vote

1 answer

522 views

Do Weil, Tate, and Ate pairings exist on all elliptic curves?

asked May 24, 2019 at 17:28

Stack Exchange Network

35 Questions

What is complexity leveraging

Examples of protocols that are insecure when run concurrently

Difference between somewhat homomorphic encryption and leveled homomorphic encryption?

How to efficiently generate a random safe prime of given length?

What is difference between Zero Knowledge proof and Zero Knowledge Proof of Knowledge?

MPC protocols for high school kids

What is straight line black box reduction?

Why is Diffie-Hellman Insecure If Order of the Generator Has Only Small Prime Factors?

What is Frobenius map of an elliptic curve?

What does the number 256 in pairing curve BN256 indicate?

Implementing randomness extractors

Naming convention for NIST elliptic curves in OPENSSL

Impossible to construct collision resistant hash function from one way function

What are the known attacks on $\phi$-hiding assumption? How to chose its parameters?

Does choosing N to be product of safe primes avoid William's p+1 factoring attack on RSA?

Why is garbled circuit a randomized encoding?

Is fixed key AES in counter mode a PRG?

Complexity leveraging in case of exponentially many hybrids

Does DDH hold in $Z_N^*$ where N is product of 2 large primes

Constructions of PRF (Pseudo Random Function)

Intuition for Cramer Shoup Encryption Scheme?

Problem with Fiat-shamir on poly-round interactive protocol?

Example of a universal one-way hash function that is not collision resistant hash function

Multiparty computation on circuits that perform group operations

Do q-ary lattices have parallelogram kind of structure?

Are there any NIST curves with pairings?

Is there a concept of embedding degree for non-pairing based elliptic curves?

NIST elliptic curves behaving anamolous in OPENSSL benchmark

Complexity of number field sieve theorem does not match with security of elliptic curves

Do Weil, Tate, and Ate pairings exist on all elliptic curves?