User DrLecter

7 votes

Accepted

Security of chameleon hash functions

answered Oct 20, 2014 at 10:31

7 votes

textbook RSA signature scheme security

answered Dec 15, 2015 at 4:57

7 votes

Accepted

Is multiplicative secret sharing secure?

answered Nov 5, 2013 at 15:13

7 votes

Why $n=pq$ with $p=2p'+1$ and $q=2q'+1$ instead of just $n=p'q'$ for RSA crypto?

answered Nov 3, 2013 at 19:29

7 votes

Accepted

Why is a simple hash into $G_2$ for (certain) pairing based crypto not possible?

answered Oct 28, 2013 at 18:40

7 votes

Accepted

post-quantum threshold secret sharing

answered Oct 9, 2013 at 13:58

7 votes

Accepted

Do I need to prepare plain text before encryption?

answered Jan 13, 2014 at 9:20

7 votes

Accepted

What does "Inverting the RSA function is as hard as factoring" mean (a rigorous explanation or intuitive will do)?

answered Jan 23, 2014 at 14:33

7 votes

Accepted

Shadowed identity in cryptography

answered Dec 25, 2013 at 15:50

7 votes

Unforgeability and type of adversary

answered Dec 18, 2013 at 22:18

7 votes

What is the difference between authenticating and signing a document?

answered Apr 5, 2014 at 11:44

7 votes

Accepted

What is the difference between SHA256WITHRSA and SHA256WITHRSAENCRYPTION digest algorithms?

answered Jan 16, 2014 at 22:54

6 votes

Accepted

Why Victor must not know which tunnel Peggy chooses?

answered Mar 9, 2014 at 10:38

6 votes

Third-party security issues with Shamir's secret sharing scheme

answered Mar 24, 2014 at 10:04

6 votes

Accepted

Are there any elliptic curve asymmetric encryption algorithms?

answered Apr 15, 2014 at 16:52

6 votes

How can we prove that two discrete logarithms are equal?

answered Apr 23, 2014 at 16:56

6 votes

Known plaintext attack on ElGamal encryption

answered Jul 28, 2014 at 7:52

6 votes

Accepted

ECC partially blind signature scheme verification

answered May 7, 2014 at 6:20

6 votes

Accepted

Outsourcing arbitrary computations securely

answered Dec 20, 2013 at 8:03

6 votes

Can one use a Cryptographic Accumulator to efficiently store Lamport public keys without the need of a Merkle Tree?

answered Dec 11, 2013 at 6:41

6 votes

What is the definition of "security beyond the birthday paradox"?

answered Oct 29, 2013 at 17:10

6 votes

What happens when a root CA has its private key compromised?

answered Nov 13, 2013 at 15:19

6 votes

Blinding twice in RSA

answered Nov 14, 2013 at 13:29

6 votes

Accepted

How to pronounce RIPEMD-160?

answered Nov 23, 2013 at 18:37

6 votes

How does Boneh–Lynn–Shacham work?

answered Oct 12, 2016 at 6:22

6 votes

RSA was rejected by which journal?

answered Aug 28, 2014 at 16:21

5 votes

Accepted

Which public key encryption scheme is re-randomizable? How can I re-randomize an encryption scheme?

answered Sep 3, 2014 at 22:47

5 votes

Accepted

Difference between oracle behavior and real execution

answered Oct 27, 2015 at 22:07

5 votes

How is it decided if $G_1$ and $G_2$ are two “additive” or “multiplicative” cyclic groups?

answered Sep 7, 2016 at 7:50

5 votes

What is an example of a secure sigma proof?

answered Jan 27, 2016 at 17:30

Stack Exchange Network

203 Answers

Security of chameleon hash functions

textbook RSA signature scheme security

Is multiplicative secret sharing secure?

Why $n=pq$ with $p=2p'+1$ and $q=2q'+1$ instead of just $n=p'q'$ for RSA crypto?

Why is a simple hash into $G_2$ for (certain) pairing based crypto not possible?

post-quantum threshold secret sharing

Do I need to prepare plain text before encryption?

What does "Inverting the RSA function is as hard as factoring" mean (a rigorous explanation or intuitive will do)?

Shadowed identity in cryptography

Unforgeability and type of adversary

What is the difference between authenticating and signing a document?

What is the difference between SHA256WITHRSA and SHA256WITHRSAENCRYPTION digest algorithms?

Why Victor must not know which tunnel Peggy chooses?

Third-party security issues with Shamir's secret sharing scheme

Are there any elliptic curve asymmetric encryption algorithms?

How can we prove that two discrete logarithms are equal?

Known plaintext attack on ElGamal encryption

ECC partially blind signature scheme verification

Outsourcing arbitrary computations securely

Can one use a Cryptographic Accumulator to efficiently store Lamport public keys without the need of a Merkle Tree?

What is the definition of "security beyond the birthday paradox"?

What happens when a root CA has its private key compromised?

Blinding twice in RSA

How to pronounce RIPEMD-160?

How does Boneh–Lynn–Shacham work?

RSA was rejected by which journal?

Which public key encryption scheme is re-randomizable? How can I re-randomize an encryption scheme?

Difference between oracle behavior and real execution

How is it decided if $G_1$ and $G_2$ are two “additive” or “multiplicative” cyclic groups?

What is an example of a secure sigma proof?