User Mark

5 votes

What does it mean for a number to be “in the order of” a prime number?

answered Dec 10, 2019 at 6:34

5 votes

Imposibility of bias-resistant coin tossing (Cleve'86) and its connection to modern notion of fairness in Secure Multiparty Computation

answered Jul 7, 2020 at 19:47

5 votes

Accepted

BGW Multiplication: How does it work?

answered Apr 24, 2020 at 7:35

5 votes

Practical examples of Threshold Secret Sharing?

answered Apr 13, 2020 at 20:03

5 votes

How to ethically publish the result in case we prove that $P = NP$?

answered Dec 17, 2020 at 6:22

5 votes

$P \ne NP$: a proof relating complexity theory to block ciphers

answered Sep 28, 2020 at 1:25

5 votes

Famous ideal lattices

answered Oct 13, 2020 at 21:39

5 votes

Accepted

Questions regarding the one-wayness and collision-resistance of a hash function based on RSA-like problem

answered Sep 21, 2020 at 0:15

5 votes

Accepted

Distribution of the Difference of Uniformly Random Elements

answered Sep 2, 2020 at 16:13

4 votes

Accepted

Where does the 8 come from? Generic Search Problem with Bounded Probabilities

answered May 8 at 19:17

4 votes

Accepted

The relationship between polynomial degree and HE performance

answered Jul 13 at 16:23

4 votes

Accepted

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

answered Nov 18, 2021 at 19:51

4 votes

Why RLWE is hard or even has a solution?

answered Sep 22, 2021 at 22:31

4 votes

Accepted

Prove: If there exist strong OWFs then there exist weak OWFs that aren't strong

answered Dec 5, 2021 at 20:21

4 votes

What is the fastest way to check whether a given vector is the shortest in a lattice?

answered Dec 29, 2021 at 10:56

4 votes

Accepted

I don't see how a ECDH is useful

answered Mar 14, 2022 at 21:37

4 votes

Accepted

Questions regarding the pseudorandom function construction of Banerjee, Peikert, and Rosen

answered Feb 3, 2022 at 20:29

4 votes

How can 4 users generate a provable fair random number?

answered Feb 13 at 21:50

4 votes

Solving subset sum via the LLL algorithm

answered Mar 28 at 23:02

4 votes

Accepted

What advantages does FrodoKEM have over other PQCs?

answered Feb 6 at 10:01

4 votes

Solving Shamir secret sharing schemes

answered Feb 8 at 3:48

4 votes

Accepted

A problem about matrix

answered Feb 9 at 20:21

4 votes

Accepted

Choice of Polynomial Quotient Ring

answered Dec 20, 2022 at 20:37

4 votes

Do we want to allow/Have we allowed parallelization (e.g GPU programming) to enter the cryptographic field? What are the consequences?

answered Jun 13, 2022 at 1:00

4 votes

value bound of r⋅e for LWE Decryption correctness

answered Oct 9, 2022 at 8:53

4 votes

Accepted

Closest Vector Problem in RLWE

answered Oct 23, 2022 at 2:27

4 votes

Accepted

Dense sphere packings and lattice-based cryptography

answered Nov 2, 2022 at 21:40

4 votes

Accepted

What basic knowledge is required to understand SIKE?

answered Jul 23, 2020 at 21:44

4 votes

Accepted

Shamir secret sharing with no dealer

answered Sep 28, 2020 at 17:35

4 votes

LWE: Round a continuous Gaussian to a true Discrete Gaussian

answered Mar 7, 2021 at 0:50

Stack Exchange Network

327 Answers

What does it mean for a number to be “in the order of” a prime number?

Imposibility of bias-resistant coin tossing (Cleve'86) and its connection to modern notion of fairness in Secure Multiparty Computation

BGW Multiplication: How does it work?

Practical examples of Threshold Secret Sharing?

How to ethically publish the result in case we prove that $P = NP$?

$P \ne NP$: a proof relating complexity theory to block ciphers

Famous ideal lattices

Questions regarding the one-wayness and collision-resistance of a hash function based on RSA-like problem

Distribution of the Difference of Uniformly Random Elements

Where does the 8 come from? Generic Search Problem with Bounded Probabilities

The relationship between polynomial degree and HE performance

*-LWE equivalent of Diffie-Hellman $g^{x^2}$ vulnerability

Why RLWE is hard or even has a solution?

Prove: If there exist strong OWFs then there exist weak OWFs that aren't strong

What is the fastest way to check whether a given vector is the shortest in a lattice?

I don't see how a ECDH is useful

Questions regarding the pseudorandom function construction of Banerjee, Peikert, and Rosen

How can 4 users generate a provable fair random number?

Solving subset sum via the LLL algorithm

What advantages does FrodoKEM have over other PQCs?

Solving Shamir secret sharing schemes

A problem about matrix

Choice of Polynomial Quotient Ring

Do we want to allow/Have we allowed parallelization (e.g GPU programming) to enter the cryptographic field? What are the consequences?

value bound of r⋅e for LWE Decryption correctness

Closest Vector Problem in RLWE

Dense sphere packings and lattice-based cryptography

What basic knowledge is required to understand SIKE?

Shamir secret sharing with no dealer

LWE: Round a continuous Gaussian to a true Discrete Gaussian