DrLecter's user avatar
DrLecter's user avatar
DrLecter's user avatar
DrLecter
  • Member for 10 years, 7 months
  • Last seen this week
  • Munich, Germany
1 vote
Accepted

In NIZK, what is the difference between "transparent“ and “without trusted setup”?

10 votes

Which blind signature schemes exist, and how do they compare?

0 votes
Accepted

What is the relationship between "Challenger" and "Oracle" in a security proof?

11 votes
Accepted

Why is DDH not hard over $\mathbb{Z}^*_p$?

4 votes
Accepted

Pairing Field size as security parameter

4 votes
Accepted

Semantic Security Active or Passive attacks?

1 vote
Accepted

Why is this signature independent of the message?

40 votes
Accepted

Why hash the message before signing it with RSA?

4 votes
Accepted

How to Distribute the Shares using Secret Sharing for arbitrary Monotone Access Structures

4 votes
Accepted

Proof for exponentiation in modular arithmetic

1 vote

Plausible Deniability in Schnorr

3 votes
Accepted

Is verification of ring signature always linear in the amount of members?

2 votes
Accepted

Showing that security of a elgamal invariant is insecure

1 vote

Provable data possession (PDP) VS Merkle tree

6 votes
Accepted

Security of chameleon hash functions

4 votes
Accepted

Partially Homomorphic Cryptographic Schemes - Deterministic vs Probabilistic

23 votes

Advantages using Diffie-Hellman or ElGamal

1 vote
Accepted

Does security against a CCA1 attacker imply security against a CPA attacker?

6 votes

How does Boneh–Lynn–Shacham work?

16 votes
Accepted

Proofs by reduction and times of adversaries

3 votes
Accepted

Schnorr protocol: how does malicious verifier win?

15 votes
Accepted

Is pairing based cryptography ready for productive use?

2 votes

Multiplication vs exponentiation in pairing based cryptography

5 votes

How is it decided if $G_1$ and $G_2$ are two “additive” or “multiplicative” cyclic groups?

4 votes
Accepted

How do RSA and ElGamal key sizes compare?

4 votes
Accepted

Hash Function representation in identity-based encryption

6 votes

Blinding twice in RSA

26 votes
Accepted

what is the difference between proofs and arguments of knowledge?

2 votes

In case M is small is it possible to recover the message

4 votes

Selective and existential unforgability of signature schemes

1
2 3 4 5
7