User DrLecter

67 votes

Accepted

What is Attribute Based Encryption?

terminology abe

answered Jun 25, 2014 at 21:37

34 votes

Accepted

Why hash the message before signing it with RSA?

answered Jan 8, 2014 at 7:51

30 votes

Accepted

What is the difference between uniformly and at random in crypto definitions?

security-definition

answered Dec 15, 2014 at 14:17

24 votes

Accepted

what is the difference between proofs and arguments of knowledge?

zero-knowledge-proofs soundness

answered Apr 22, 2016 at 8:45

23 votes

Advantages using Diffie-Hellman or ElGamal

encryption public-key diffie-hellman elgamal-encryption

answered Jan 12, 2014 at 12:28

16 votes

Accepted

Proofs by reduction and times of adversaries

provable-security security-definition

answered Feb 11, 2014 at 21:01

16 votes

Accepted

Difference between Pedersen commitment and commitment based on ElGamal

discrete-logarithm elgamal-encryption commitments

answered Nov 24, 2013 at 19:30

16 votes

Relation between attack and attack model for signatures

signature provable-security attack adversarial-model

answered Oct 25, 2013 at 15:08

14 votes

Accepted

Is pairing based cryptography ready for productive use?

elliptic-curves pairings

answered Apr 28, 2014 at 9:52

14 votes

Accepted

in Bilinear pairings, what is the difference between Type 2 and Type 3?

pairings group-theory

answered May 2, 2014 at 9:19

14 votes

Accepted

What are Cryptographic Multi-linear Maps?

encryption group-theory

answered May 14, 2014 at 14:07

13 votes

Accepted

uniform vs. non-uniform PPT

provable-security complexity

answered Apr 2, 2015 at 0:12

12 votes

Accepted

What is a q-type assumption?

security-definition hardness-assumptions

answered Oct 27, 2014 at 16:27

12 votes

How does Random Oracle and Standard Model differ?

random-oracle-model

answered Aug 28, 2014 at 17:50

11 votes

Accepted

Why is DDH not hard over $\mathbb{Z}^*_p$?

diffie-hellman distinguisher

answered Mar 21, 2014 at 9:57

11 votes

Certificateless cryptography

public-key certificates certificateless-crypto

answered Nov 7, 2013 at 11:39

11 votes

Accepted

What characters does AES output?

encryption aes

answered Dec 27, 2013 at 23:10

10 votes

What is Perceptual Encryption?

encryption

answered May 4, 2014 at 11:40

9 votes

Accepted

Can a homomorphic encryption scheme be made CCA2 Secure?

homomorphic-encryption chosen-ciphertext-attack

answered Jul 3, 2014 at 13:55

8 votes

Chosen plaintext attack on textbook RSA decryption

rsa chosen-ciphertext-attack

answered Aug 16, 2014 at 10:18

8 votes

Accepted

Disadvantages of one-way accumulators?

one-way-function accumulators

answered Apr 12, 2014 at 20:33

8 votes

Accepted

Mapping of message onto elliptic curve and reverse it?

elliptic-curves elgamal-encryption

answered Mar 13, 2014 at 8:15

8 votes

Accepted

What does "Inverting the RSA function is as hard as factoring" mean (a rigorous explanation or intuitive will do)?

rsa factoring

answered Jan 23, 2014 at 14:33

8 votes

what's the advantages of identity-based systems over certificate-based ones?

public-key pki identity-based-encryption

answered Jan 17, 2014 at 18:18

8 votes

Which blind signature schemes exist, and how do they compare?

signature blind-signature

answered Jan 10, 2014 at 13:03

8 votes

Accepted

Can anyone give an example where (asymmetric) crypto can go wrong due to selection of wrong groups?

provable-security group-theory

answered Nov 11, 2013 at 19:21

8 votes

Explanation of the Fiat-Shamir heuristic

signature zero-knowledge-proofs

answered Dec 11, 2014 at 11:09

7 votes

Accepted

Is multiplicative secret sharing secure?

answered Nov 5, 2013 at 15:13

7 votes

Accepted

When using Curve25519, why does the private key always have a fixed bit at 2^254?

elliptic-curves keys reference-request

answered Nov 20, 2013 at 11:29

7 votes

Accepted

What is adaptive zero-knowledge?

zero-knowledge-proofs multiparty-computation

answered Nov 24, 2013 at 18:35

Stack Exchange Network

current community

your communities

more stack exchange communities

202 Answers

What is Attribute Based Encryption?

Why hash the message before signing it with RSA?

What is the difference between uniformly and at random in crypto definitions?

what is the difference between proofs and arguments of knowledge?

Advantages using Diffie-Hellman or ElGamal

Proofs by reduction and times of adversaries

Difference between Pedersen commitment and commitment based on ElGamal

Relation between attack and attack model for signatures

Is pairing based cryptography ready for productive use?

in Bilinear pairings, what is the difference between Type 2 and Type 3?

What are Cryptographic Multi-linear Maps?

uniform vs. non-uniform PPT

What is a q-type assumption?

How does Random Oracle and Standard Model differ?

Why is DDH not hard over $\mathbb{Z}^*_p$?

Certificateless cryptography

What characters does AES output?

What is Perceptual Encryption?

Can a homomorphic encryption scheme be made CCA2 Secure?

Chosen plaintext attack on textbook RSA decryption

Disadvantages of one-way accumulators?

Mapping of message onto elliptic curve and reverse it?

What does "Inverting the RSA function is as hard as factoring" mean (a rigorous explanation or intuitive will do)?

what's the advantages of identity-based systems over certificate-based ones?

Which blind signature schemes exist, and how do they compare?

Can anyone give an example where (asymmetric) crypto can go wrong due to selection of wrong groups?

Explanation of the Fiat-Shamir heuristic

Is multiplicative secret sharing secure?

When using Curve25519, why does the private key always have a fixed bit at 2^254?

What is adaptive zero-knowledge?