Skip to main content
K.G.'s user avatar
K.G.'s user avatar
K.G.'s user avatar
K.G.
  • Member for 10 years, 10 months
  • Last seen this week
23 votes
Accepted

When would one prefer a proof of knowledge instead of a zero-knowledge proof?

17 votes
Accepted

Perfect zero knowledge for the Schnorr protocol?

17 votes
Accepted

Relation between Key-exchange and Public-Key encryption schemes

16 votes
Accepted

Difference between CBC-MAC and CMAC

15 votes

Why is NON DISCRETE logarithm problem not hard as the DISCRETE logarithm problem (so computationally hard)?

13 votes

Why is the private key generated first in public key crypto?

11 votes

Should we trust the NIST-recommended ECC parameters?

10 votes
Accepted

Should different key pairs be used for signing and encryption?

9 votes
Accepted

In elliptic curve cryptography, how is "A dot A" computed?

8 votes

Hide a weakness in ECC by choosing the prime or one of the curve coefficients

8 votes
Accepted

Perfect Secrecy -> One Time Semantic Security -> Secure PRG

8 votes
Accepted

Construct IND-CPA secure encryption scheme by combining two given schemes

7 votes

Integrity with anti-confidentiality

7 votes

Zero knowledge proof of possession of key

7 votes
Accepted

What is adversary's advantage in cryptography and why we use it?

7 votes

How do we prove that AES, DES etc. are secure?

7 votes

Why $n=pq$ with $p=2p'+1$ and $q=2q'+1$ instead of just $n=p'q'$ for RSA crypto?

6 votes

Why don't we use MACs to store passwords?

6 votes
Accepted

bcrypt and pbkdf2 double hashing

6 votes

Is it possible to tweak AES-GCM so that it is satisfactory for whole-disk encryption (like XTS mode)?

6 votes
Accepted

Indistinguishability versus semantic security?

6 votes
Accepted

What is the official, generally accepted definition of "lightweight crypto"?

5 votes

Is there an asymmetric encryption protocol which provides arbitrarily many seemingly unrelated public keys for a single private key?

5 votes

What is the meaning of asymptotic security proofs in practice?

5 votes
Accepted

Computationaly hard detokenization algorithm for credit card numbers

5 votes

One-way permutation over a small interval?

5 votes

Rainbow table for DES with all-zero plaintext?

5 votes

How is a re-encryption done with elGamal?

5 votes

What is a “witness” in zero knowledge proof?

5 votes
Accepted

Could this "symmetric RSA" scheme provide key compromise resistant communications?