User DrLecter

68 votes

Accepted

What is Attribute Based Encryption?

answered Jun 25, 2014 at 21:37

37 votes

Accepted

Why hash the message before signing it with RSA?

answered Jan 8, 2014 at 7:51

33 votes

Accepted

What is the difference between uniformly and at random in crypto definitions?

answered Dec 15, 2014 at 14:17

26 votes

Accepted

what is the difference between proofs and arguments of knowledge?

answered Apr 22, 2016 at 8:45

23 votes

Advantages using Diffie-Hellman or ElGamal

answered Jan 12, 2014 at 12:28

16 votes

Accepted

Proofs by reduction and times of adversaries

answered Feb 11, 2014 at 21:01

16 votes

Accepted

Difference between Pedersen commitment and commitment based on ElGamal

answered Nov 24, 2013 at 19:30

16 votes

Relation between attack and attack model for signatures

answered Oct 25, 2013 at 15:08

14 votes

Accepted

Is pairing based cryptography ready for productive use?

answered Apr 28, 2014 at 9:52

14 votes

Accepted

in Bilinear pairings, what is the difference between Type 2 and Type 3?

answered May 2, 2014 at 9:19

14 votes

Accepted

What are Cryptographic Multi-linear Maps?

answered May 14, 2014 at 14:07

13 votes

How does Random Oracle and Standard Model differ?

answered Aug 28, 2014 at 17:50

13 votes

Accepted

uniform vs. non-uniform PPT

answered Apr 2, 2015 at 0:12

12 votes

Accepted

What is a q-type assumption?

answered Oct 27, 2014 at 16:27

12 votes

Certificateless cryptography

answered Nov 7, 2013 at 11:39

11 votes

Accepted

What characters does AES output?

answered Dec 27, 2013 at 23:10

11 votes

Accepted

Why is DDH not hard over $\mathbb{Z}^*_p$?

answered Mar 21, 2014 at 9:57

10 votes

Accepted

Can a homomorphic encryption scheme be made CCA2 Secure?

answered Jul 3, 2014 at 13:55

10 votes

What is Perceptual Encryption?

answered May 4, 2014 at 11:40

10 votes

Which blind signature schemes exist, and how do they compare?

answered Jan 10, 2014 at 13:03

9 votes

Accepted

Mapping of message onto elliptic curve and reverse it?

answered Mar 13, 2014 at 8:15

8 votes

Accepted

Disadvantages of one-way accumulators?

answered Apr 12, 2014 at 20:33

8 votes

Accepted

How to select $g$ in Paillier Cryptosystem

answered Apr 13, 2014 at 19:43

8 votes

Chosen plaintext attack on textbook RSA decryption

answered Aug 16, 2014 at 10:18

8 votes

what's the advantages of identity-based systems over certificate-based ones?

answered Jan 17, 2014 at 18:18

8 votes

Accepted

Can anyone give an example where (asymmetric) crypto can go wrong due to selection of wrong groups?

answered Nov 11, 2013 at 19:21

8 votes

Explanation of the Fiat-Shamir heuristic

answered Dec 11, 2014 at 11:09

7 votes

Accepted

Is multiplicative secret sharing secure?

answered Nov 5, 2013 at 15:13

7 votes

Accepted

When using Curve25519, why does the private key always have a fixed bit at 2^254?

answered Nov 20, 2013 at 11:29

7 votes

Accepted

What is adaptive zero-knowledge?

answered Nov 24, 2013 at 18:35

Stack Exchange Network

202 Answers

What is Attribute Based Encryption?

Why hash the message before signing it with RSA?

What is the difference between uniformly and at random in crypto definitions?

what is the difference between proofs and arguments of knowledge?

Advantages using Diffie-Hellman or ElGamal

Proofs by reduction and times of adversaries

Difference between Pedersen commitment and commitment based on ElGamal

Relation between attack and attack model for signatures

Is pairing based cryptography ready for productive use?

in Bilinear pairings, what is the difference between Type 2 and Type 3?

What are Cryptographic Multi-linear Maps?

How does Random Oracle and Standard Model differ?

uniform vs. non-uniform PPT

What is a q-type assumption?

Certificateless cryptography

What characters does AES output?

Why is DDH not hard over $\mathbb{Z}^*_p$?

Can a homomorphic encryption scheme be made CCA2 Secure?

What is Perceptual Encryption?

Which blind signature schemes exist, and how do they compare?

Mapping of message onto elliptic curve and reverse it?

Disadvantages of one-way accumulators?

How to select $g$ in Paillier Cryptosystem

Chosen plaintext attack on textbook RSA decryption

what's the advantages of identity-based systems over certificate-based ones?

Can anyone give an example where (asymmetric) crypto can go wrong due to selection of wrong groups?

Explanation of the Fiat-Shamir heuristic

Is multiplicative secret sharing secure?

When using Curve25519, why does the private key always have a fixed bit at 2^254?

What is adaptive zero-knowledge?