User knaccc

0 votes

How to anonymously vote?

answered Jun 9 at 11:32

1 vote

How can we derive $G$ from $P$ and $N$?

answered Dec 26, 2023 at 21:06

1 vote

Is it possible to check pedersen commitment is of postive or negative number without knowing the original value

answered Nov 11, 2023 at 5:15

0 votes

Can I move elements from cyclic subgroup to its cyclic parent group?

answered Sep 22, 2023 at 13:57

0 votes

Zero-Knowledge Proof of Encryption with a Specific Key

answered Sep 21, 2023 at 17:34

1 vote

Generating Complex Passwords from (Non-)Memorable Phrases - Need Advice

answered Sep 3, 2023 at 13:57

1 vote

Accepted

Many-out-of-many proofs

answered Aug 12, 2023 at 22:15

1 vote

How to prove that a Pedersen commitment has the same value as at least one of a set of other Pedersen commitments, without revealing which

answered Jul 28, 2023 at 4:39

4 votes

Accepted

Why schnorr signatures uses H(R||m) instead of H(m)?

answered Jul 4, 2023 at 23:08

3 votes

Providing tokens for anonymous survey

answered May 25, 2023 at 19:11

2 votes

Accepted

Deterministic EC key derivation with anonymity and proofs

answered May 24, 2023 at 20:38

5 votes

Accepted

RFCs & IANA specs about Ed25519 inaccurate?

answered May 20, 2023 at 16:24

1 vote

Choice of nonce for reproducible encryption

answered May 1, 2023 at 2:20

0 votes

Accepted

Chaum-Pedersen protocol adapted to elliptic curves

answered Mar 30, 2023 at 6:25

5 votes

Accepted

Encrypting a symmetric key which requires 2 keys to decrypt?

answered Mar 27, 2023 at 1:54

3 votes

Accepted

Where does signing/decrypting take place on a YubiKey 5 for PGP private key?

answered Mar 26, 2023 at 0:07

2 votes

Accepted

Pedersen commitments equivalence

answered Mar 18, 2023 at 15:42

0 votes

Verify that a user submitted data without identifying which data was submitted

answered Jan 14, 2023 at 11:55

2 votes

Is it safe to use ECDH shared secret as a simple authentication cookie?

answered Jan 11, 2023 at 18:28

5 votes

How many valid X25519 private keys are there?

answered Jan 10, 2023 at 13:44

2 votes

Proving same value in ciphertext and Pedersen commitment Using Sigma Zero Knowledge

answered Dec 27, 2022 at 2:56

2 votes

Can elliptic curve groups be used for commutative encryption?

answered Dec 4, 2022 at 12:38

1 vote

How to implement a "viewing key" for secrets proved by zero knowledge proofs?

answered Nov 27, 2022 at 18:17

3 votes

Accepted

Details about blind signature on ed25519

answered Nov 14, 2022 at 15:58

2 votes

How does taking the difference between commitments verifies that the messages are correct?

answered Nov 4, 2022 at 11:02

1 vote

Linkable ring signatures: is it possible to check linkability between two signatures with different rings?

answered Oct 26, 2022 at 17:37

3 votes

Where is hash to curve used?

answered Oct 26, 2022 at 2:19

2 votes

Does an binary elliptic curve like sect571r1 support a bijective asymmetric operation pair on bytes? If so, is there a self-contained example?

answered Sep 29, 2022 at 3:29

3 votes

Accepted

The significance of rewinding a simulation in an ZK interactive proof

answered Sep 24, 2022 at 20:09

3 votes

Accepted

How does this libgcrypt elgamal decryption work?

answered Sep 23, 2022 at 21:33

Stack Exchange Network

108 Answers

How to anonymously vote?

How can we derive $G$ from $P$ and $N$?

Is it possible to check pedersen commitment is of postive or negative number without knowing the original value

Can I move elements from cyclic subgroup to its cyclic parent group?

Zero-Knowledge Proof of Encryption with a Specific Key

Generating Complex Passwords from (Non-)Memorable Phrases - Need Advice

Many-out-of-many proofs

How to prove that a Pedersen commitment has the same value as at least one of a set of other Pedersen commitments, without revealing which

Why schnorr signatures uses H(R||m) instead of H(m)?

Providing tokens for anonymous survey

Deterministic EC key derivation with anonymity and proofs

RFCs & IANA specs about Ed25519 inaccurate?

Choice of nonce for reproducible encryption

Chaum-Pedersen protocol adapted to elliptic curves

Encrypting a symmetric key which requires 2 keys to decrypt?

Where does signing/decrypting take place on a YubiKey 5 for PGP private key?

Pedersen commitments equivalence

Verify that a user submitted data without identifying which data was submitted

Is it safe to use ECDH shared secret as a simple authentication cookie?

How many valid X25519 private keys are there?

Proving same value in ciphertext and Pedersen commitment Using Sigma Zero Knowledge

Can elliptic curve groups be used for commutative encryption?

How to implement a "viewing key" for secrets proved by zero knowledge proofs?

Details about blind signature on ed25519

How does taking the difference between commitments verifies that the messages are correct?

Linkable ring signatures: is it possible to check linkability between two signatures with different rings?

Where is hash to curve used?

Does an binary elliptic curve like sect571r1 support a bijective asymmetric operation pair on bytes? If so, is there a self-contained example?

The significance of rewinding a simulation in an ZK interactive proof

How does this libgcrypt elgamal decryption work?