Skip to main content
Mark Schultz-Wu's user avatar
Mark Schultz-Wu's user avatar
Mark Schultz-Wu's user avatar
Mark Schultz-Wu
Moderator
  • Member for 7 years, 2 months
  • Last seen this week
2 votes
Accepted

In Learning with errors, what is the relation between the size(or standard deviation) of errors and security?

0 votes

LWE Decryption: Generating errors for (c1, c2) that match binary message m

1 vote

LWE and Lattice-based cryptography: How to recover binary message $M$ from $(u, v)$ values?

3 votes

Reference implementation of Shamir's Secret Sharing

1 vote

Trying to understand p-adic logarithm map in elliptic curves

3 votes

Why can't we just increase the bit length to counteract shor's algorithm?

3 votes

Why did post-quantum key exchanges go extinct?

2 votes
Accepted

How "unorthogonal" can a LLL-reduced basis be?

2 votes
Accepted

How to calculate probability of cracking a password from entropy?

3 votes

WRT Shor resistant crypto: which is more likely

4 votes

How can 4 users generate a provable fair random number?

6 votes

The successive minima of a lattice

1 vote
Accepted

Does Index calculus work on secp256k1?

6 votes

Is finding an encryption (or hash) algorithm science, or is it art?

4 votes
Accepted

A problem about matrix

0 votes

Reencrypting in Homomorphic Encryption

2 votes
Accepted

Which lattice-based encryption scheme/signatures is fundamental?

4 votes

Solving Shamir secret sharing schemes

1 vote
Accepted

A random access machine with lots of random data on its tape is a stronger assumption than the existence of OWFs

2 votes
Accepted

Proving that the length-preserving OWF does not have polynomially bounded cycle

4 votes
Accepted

What advantages does FrodoKEM have over other PQCs?

2 votes
Accepted

sUF-CMA security of Lyubashevsky's ID and signature protocol

15 votes
Accepted

What are the drawbacks of "lightweight crypto"?

3 votes
Accepted

How to show additive subgroup of $R^n$ is not discrete?

2 votes
Accepted

Why we need to consider a probability ensemble and not just a probability distribution in the definition of Security under Simulation?

0 votes

Showing that CPA encryption schemes cannot preserve the length of a message

0 votes

ISIS problem in the case of $m=n$

1 vote

encoding/decoding in the CKKS are isometric ring isomorphisms?

2 votes

Why does CKKS decryption have approximate correctness?

1 vote

Covering codes for digital signatures

1 2 3
4
5
13