pintor's user avatar
pintor's user avatar
pintor's user avatar
pintor
  • Member for 6 years, 1 month
  • Last seen this week
  • Spain
7 votes
2 answers
808 views

Hashing list: concatenation vs prepending

4 votes
1 answer
136 views

PBKDF security if all but one keys are exposed

4 votes
0 answers
158 views

Indistinguishability vs fixed bit-length

4 votes
2 answers
524 views

Sigma proofs for Pedersen commitments arithmetic under different bases

3 votes
1 answer
347 views

ZK due to rewinds, why we need poly number of rewinds?

3 votes
2 answers
174 views

Privacy intuition vs formal definition

3 votes
1 answer
43 views

Security of modular exponentiation for non-uniform inputs

2 votes
1 answer
93 views

Fiat-Shamir with interactions

2 votes
0 answers
48 views

How can we combine circuits for complex ZKBoo proofs?

2 votes
1 answer
80 views

What is the quadratic character of the field over which elliptic curve is defined?

2 votes
0 answers
112 views

ElGamal with elliptic curves and semantic security

2 votes
0 answers
127 views

How to extract witness from a non-interactive lattice-based proof?

2 votes
2 answers
260 views

Zero secret key in EC ElGamal: standards vs theory

2 votes
0 answers
66 views

How do lattice-based proofs with Reed-Solomon codes simultaneously avoid aborts and multiple repeats?

1 vote
0 answers
49 views

Verifiable Base Point generation via NIST SP 800-186 method

1 vote
0 answers
56 views

Birational transformation from Edwards curve with not square d to Edwards curve with square d

1 vote
1 answer
314 views

Homomorphic mapping between elliptic curve point and Zq

1 vote
1 answer
214 views

Decrypting only message product - is it possible?

1 vote
2 answers
126 views

Subgroup generation: should we check that order is not 2? or g in not too small?

1 vote
1 answer
57 views

Is injective encoding of a message important for Elliptic Curve ElGamal?

0 votes
1 answer
171 views

The danger of Hash collision in Schnorr NIZK

0 votes
1 answer
355 views

Lenght of the ElGamal cipher

0 votes
1 answer
157 views

Second challenge in Fiat-Shamir for 5-round schemes

0 votes
1 answer
307 views

Is there a formula for calculating the inverse of a sum in modular arithmetic?

0 votes
0 answers
35 views

Unbounded ZK vs perfect ZK?