User Mark

3 votes

I need a pathway for studying Lattice-Based Cryptography

answered Jan 3, 2021 at 0:23

3 votes

Accepted

Break Lattice-Based Cryptography with Variational Quantum Algorithm (only 25 k. Qbits for Kyber1024)?

answered Dec 12, 2022 at 20:17

3 votes

Why not use Diffie/Hellman Prime Numbers MUCH larger than 2048 bits?

answered Oct 24, 2022 at 17:37

3 votes

Accepted

Lattice-based Signatures and Hashes

answered Oct 24, 2022 at 23:56

3 votes

Accepted

On the definition of Gap SVP

answered Apr 10, 2022 at 0:09

3 votes

Relative bits of security of slower functions

answered May 16, 2022 at 23:38

3 votes

Accepted

What does it mean for public keys to be in coNP

answered Mar 28, 2022 at 16:42

3 votes

Why RLWE is lighter than LWE and why we can pick $a_i$ as a permutation of $a_1$ in RLWE but not LWE?

answered Mar 11, 2022 at 2:41

3 votes

Advanced Composition in DP is worse than Basic Composition

answered Feb 18, 2022 at 3:56

3 votes

What is a secure, modern, partially homomorphic encryption scheme?

answered Feb 28, 2022 at 7:14

3 votes

Accepted

Do people manually select every integer used in a crypto hash function or are they generated by a computer?

answered Jan 20, 2022 at 8:45

3 votes

Accepted

Solving system of linear equtions over binary field with error

answered Jan 24, 2022 at 19:20

3 votes

Functional and security model for SEAL

answered Sep 15, 2021 at 19:02

3 votes

Different secret sharing schemes instead of Shamir's?

answered Nov 5, 2021 at 0:28

3 votes

Accepted

How to show additive subgroup of $R^n$ is not discrete?

answered Feb 1 at 3:13

3 votes

WRT Shor resistant crypto: which is more likely

answered Feb 15 at 2:39

3 votes

Why can't we just increase the bit length to counteract shor's algorithm?

answered Feb 27 at 19:06

3 votes

Reference implementation of Shamir's Secret Sharing

answered Mar 6 at 3:35

3 votes

Why use small error vectors in LWE instead of big ones?

answered Jul 27 at 17:12

3 votes

Accepted

What if LWE is not as secure as we think?

answered Jun 9 at 18:16

3 votes

Average- and worst-case complexity

answered May 17 at 19:50

3 votes

Accepted

Is there any cheaper way for multiplying a plaintext scalar to a vector?

answered Sep 25 at 19:36

2 votes

Are PRNGs Key Derivation Functions?

answered Nov 21, 2021 at 4:52

2 votes

Testing of PQC NIST round3 submissions

answered Dec 2, 2021 at 19:24

2 votes

Accepted

Is it possible to send a file that cannot be opened or copied by the reciever, but only by a pre made program?

answered Sep 15, 2021 at 19:09

2 votes

Accepted

Does CPA model the challenge plaintext are the same

answered Sep 17, 2021 at 4:58

2 votes

How to interpret my professor's statement about "seed" and "symmetric-key encryption"?

answered Nov 2, 2021 at 2:31

2 votes

How can we measure the security levels of post-quantum cryptographic algorithms? Is there a standard way of this measurement?

answered Jan 21, 2022 at 0:06

2 votes

Accepted

The existence of OWFs vs $\mathbf{EXP} \neq \mathbf{BPP}$

answered Jan 24, 2022 at 20:57

2 votes

Accepted

LWE and extended trapdoor claw free functions

answered Jan 9, 2022 at 23:21

Stack Exchange Network

326 Answers

I need a pathway for studying Lattice-Based Cryptography

Break Lattice-Based Cryptography with Variational Quantum Algorithm (only 25 k. Qbits for Kyber1024)?

Why not use Diffie/Hellman Prime Numbers MUCH larger than 2048 bits?

Lattice-based Signatures and Hashes

On the definition of Gap SVP

Relative bits of security of slower functions

What does it mean for public keys to be in coNP

Why RLWE is lighter than LWE and why we can pick $a_i$ as a permutation of $a_1$ in RLWE but not LWE?

Advanced Composition in DP is worse than Basic Composition

What is a secure, modern, partially homomorphic encryption scheme?

Do people manually select every integer used in a crypto hash function or are they generated by a computer?

Solving system of linear equtions over binary field with error

Functional and security model for SEAL

Different secret sharing schemes instead of Shamir's?

How to show additive subgroup of $R^n$ is not discrete?

WRT Shor resistant crypto: which is more likely

Why can't we just increase the bit length to counteract shor's algorithm?

Reference implementation of Shamir's Secret Sharing

Why use small error vectors in LWE instead of big ones?

What if LWE is not as secure as we think?

Average- and worst-case complexity

Is there any cheaper way for multiplying a plaintext scalar to a vector?

Are PRNGs Key Derivation Functions?

Testing of PQC NIST round3 submissions

Is it possible to send a file that cannot be opened or copied by the reciever, but only by a pre made program?

Does CPA model the challenge plaintext are the same

How to interpret my professor's statement about "seed" and "symmetric-key encryption"?

How can we measure the security levels of post-quantum cryptographic algorithms? Is there a standard way of this measurement?

The existence of OWFs vs $\mathbf{EXP} \neq \mathbf{BPP}$

LWE and extended trapdoor claw free functions