user avatar
user avatar
user avatar
K.G.
  • Member for 8 years, 11 months
  • Last seen this week
20 votes
Accepted

When would one prefer a proof of knowledge instead of a zero-knowledge proof?

15 votes
Accepted

Perfect zero knowledge for the Schnorr protocol?

15 votes
Accepted

Difference between CBC-MAC and CMAC

14 votes

Why is NON DISCRETE logarithm problem not hard as the DISCRETE logarithm problem (so computationally hard)?

12 votes

Why is the private key generated first in public key crypto?

12 votes
Accepted

Relation between Key-exchange and Public-Key encryption schemes

11 votes

Should we trust the NIST-recommended ECC parameters?

10 votes
Accepted

Should different key pairs be used for signing and encryption?

9 votes
Accepted

In elliptic curve cryptography, how is "A dot A" computed?

8 votes

Hide a weakness in ECC by choosing the prime or one of the curve coefficients

7 votes

Zero knowledge proof of possession of key

7 votes
Accepted

What is adversary's advantage in cryptography and why we use it?

7 votes

How do we prove that AES, DES etc. are secure?

7 votes

Why $n=pq$ with $p=2p'+1$ and $q=2q'+1$ instead of just $n=p'q'$ for RSA crypto?

7 votes
Accepted

Perfect Secrecy -> One Time Semantic Security -> Secure PRG

7 votes
Accepted

Construct IND-CPA secure encryption scheme by combining two given schemes

7 votes

Integrity with anti-confidentiality

6 votes

Is it possible to tweak AES-GCM so that it is satisfactory for whole-disk encryption (like XTS mode)?

6 votes

Why don't we use MACs to store passwords?

6 votes
Accepted

bcrypt and pbkdf2 double hashing

6 votes
Accepted

What is the official, generally accepted definition of "lightweight crypto"?

5 votes

Is there an asymmetric encryption protocol which provides arbitrarily many seemingly unrelated public keys for a single private key?

5 votes
Accepted

How well does breaking multiple DH key exchanges over the same group scale?

5 votes

How does an oblivious test of plaintext equality work?

5 votes
Accepted

Computationaly hard detokenization algorithm for credit card numbers

5 votes

Rainbow table for DES with all-zero plaintext?

5 votes

How is a re-encryption done with elGamal?

5 votes

What is a “witness” in zero knowledge proof?

5 votes
Accepted

Could this "symmetric RSA" scheme provide key compromise resistant communications?

4 votes

Elliptic Curves of different forms