User Mark

2 votes

Accepted

Constraints on q for q-ary lattices?

answered Sep 5, 2021 at 22:31

2 votes

Accepted

Is the post-quantum scheme quantum-resistant without regard to QROM

answered May 22, 2021 at 9:28

2 votes

Accepted

Euclidean norms do not need full rank lattices

answered May 30, 2021 at 23:55

2 votes

Why is the error in RLWE "smaller" than LWE?

answered Jun 3, 2021 at 8:23

2 votes

What is the difference between a cryptographic primitive and a functionality?

answered May 12, 2020 at 23:08

2 votes

Accepted

MAC security game

answered Apr 21, 2020 at 1:36

2 votes

Hard random lattices

answered May 8, 2020 at 3:06

2 votes

Encryption method that reduces the cipher text to a single byte

answered May 8, 2020 at 19:53

2 votes

Accepted

Relationship between generating elements given by cycles in Cayley graph

answered Apr 13, 2020 at 19:54

2 votes

Accepted

How to have a bound (upper or lower) of Gaussion distribution over lattice based crypto>

answered Apr 4, 2020 at 5:24

2 votes

What exactly is the problem with using electronic codebooks as a block cipher mode

answered Apr 8, 2020 at 22:58

2 votes

Concrete Example of AND Gate Using Garbled Circuit

answered Apr 10, 2020 at 21:01

2 votes

Accepted

Computational trapdoor where the problem is tractable for both parties but easier for one

answered Jun 2, 2020 at 3:35

2 votes

Accepted

Would knowing the random seed help to break AES or similar?

answered May 25, 2020 at 18:21

2 votes

Accepted

Sensitivity on differential privacy

answered Aug 20, 2020 at 2:42

2 votes

All generators for modulo p

answered Mar 31, 2020 at 7:06

2 votes

Creating cryptographic algorithms at runtime

answered Oct 30, 2019 at 1:46

2 votes

Accepted

Is there an adaptive version of LWE assumption with respect to some potentially non-uniform secret distribution?

answered Dec 11, 2019 at 18:14

2 votes

How to decrypt using CRT, and then verify by encrypting without CRT?

answered Mar 8, 2020 at 2:01

2 votes

Accepted

Is there a LWE based public-key encryption scheme which is CCA1-secure?

answered Jan 2, 2020 at 4:51

2 votes

How to compute ElGamal decryption by hand

answered Aug 25, 2019 at 4:27

2 votes

Single Ciphertext which can decrypt with multiple keys

answered Jul 28, 2019 at 23:37

2 votes

Are PRNGs Key Derivation Functions?

answered Nov 21, 2021 at 4:52

2 votes

Testing of PQC NIST round3 submissions

answered Dec 2, 2021 at 19:24

2 votes

Accepted

Is it possible to send a file that cannot be opened or copied by the reciever, but only by a pre made program?

answered Sep 15, 2021 at 19:09

2 votes

Accepted

Does CPA model the challenge plaintext are the same

answered Sep 17, 2021 at 4:58

2 votes

How to interpret my professor's statement about "seed" and "symmetric-key encryption"?

answered Nov 2, 2021 at 2:31

2 votes

How can we measure the security levels of post-quantum cryptographic algorithms? Is there a standard way of this measurement?

answered Jan 21, 2022 at 0:06

2 votes

Accepted

The existence of OWFs vs $\mathbf{EXP} \neq \mathbf{BPP}$

answered Jan 24, 2022 at 20:57

2 votes

Accepted

LWE and extended trapdoor claw free functions

answered Jan 9, 2022 at 23:21

Stack Exchange Network

327 Answers

Constraints on q for q-ary lattices?

Is the post-quantum scheme quantum-resistant without regard to QROM

Euclidean norms do not need full rank lattices

Why is the error in RLWE "smaller" than LWE?

What is the difference between a cryptographic primitive and a functionality?

MAC security game

Hard random lattices

Encryption method that reduces the cipher text to a single byte

Relationship between generating elements given by cycles in Cayley graph

How to have a bound (upper or lower) of Gaussion distribution over lattice based crypto>

What exactly is the problem with using electronic codebooks as a block cipher mode

Concrete Example of AND Gate Using Garbled Circuit

Computational trapdoor where the problem is tractable for both parties but easier for one

Would knowing the random seed help to break AES or similar?

Sensitivity on differential privacy

All generators for modulo p

Creating cryptographic algorithms at runtime

Is there an adaptive version of LWE assumption with respect to some potentially non-uniform secret distribution?

How to decrypt using CRT, and then verify by encrypting without CRT?

Is there a LWE based public-key encryption scheme which is CCA1-secure?

How to compute ElGamal decryption by hand

Single Ciphertext which can decrypt with multiple keys

Are PRNGs Key Derivation Functions?

Testing of PQC NIST round3 submissions

Is it possible to send a file that cannot be opened or copied by the reciever, but only by a pre made program?

Does CPA model the challenge plaintext are the same

How to interpret my professor's statement about "seed" and "symmetric-key encryption"?

How can we measure the security levels of post-quantum cryptographic algorithms? Is there a standard way of this measurement?

The existence of OWFs vs $\mathbf{EXP} \neq \mathbf{BPP}$

LWE and extended trapdoor claw free functions