Skip to main content
Léo Colisson's user avatar
Léo Colisson's user avatar
Léo Colisson's user avatar
Léo Colisson
  • Member for 6 years, 10 months
  • Last seen more than a week ago
27 votes
7 answers
6k views

Is there any famous protocol that were proven secure but whose proof was wrong and lead to real world attacks?

8 votes
2 answers
1k views

LWE: Round a continuous Gaussian to a true Discrete Gaussian

5 votes
1 answer
340 views

LWE with identity sub-matrix and reused sampled from [MP12]: why is it secure?

3 votes
1 answer
105 views

Is it common/valid to hardcode an element of a language into a simulator?

3 votes
0 answers
170 views

Equivalents of Yao's Xor lemma to rounds, or other hardness amplification methods?

3 votes
1 answer
329 views

LWE secure with one entry without noise

3 votes
1 answer
876 views

DSA: why using mod p mod q and not just mod p

2 votes
2 answers
1k views

Compute discrete logarithm mod $n=p \times q$ knowing factorisation

2 votes
0 answers
143 views

Leftover hash lemma-like without lossy functions

2 votes
0 answers
120 views

Security of LWE when a small leakage is allowed on the noise

1 vote
0 answers
62 views

Provable security: impossible reduction when messages are encrypted/semantic security with function depending on the output of adversary

1 vote
0 answers
50 views

Abstract Cryptography: why local simulators?

1 vote
0 answers
75 views

Zero-knowledge with leakage about the witness