DrLecter's user avatar
DrLecter's user avatar
DrLecter's user avatar
DrLecter
  • Member for 10 years, 5 months
  • Last seen this week
  • Vienna, Austria
4 votes
Accepted

Schnorr Identification protocol sometimes wrong?

4 votes

Why the need to hash before signing small data?

4 votes
Accepted

Can I publish the accumulator trapdoor and still keep it secure?

4 votes
Accepted

Pairing Field size as security parameter

4 votes
Accepted

Possible to check if $a \in \mathrm{QR}_n$?

4 votes
Accepted

Usability of padding scheme in blinded RSA signature?

4 votes

Encryption of a number with RSA bigger than $n$

4 votes
Accepted

Proof for exponentiation in modular arithmetic

4 votes
Accepted

Elliptic Curve Verifiable Secret Sharing

4 votes

Could someone reuse client certificates?

4 votes
Accepted

How to Distribute the Shares using Secret Sharing for arbitrary Monotone Access Structures

4 votes
Accepted

Why use a timestamp and how can someone know it's the correct one?

4 votes
Accepted

What is a Trapdoor in Merkle Signature?

4 votes

Are hash trees an alternative, quantum-resistant signature scheme which can replace RSA?

4 votes

Can you explain partial private key extract algorithm in certificateless Public key cryptography?

3 votes
Accepted

Hardness of problem related to bilinear pairings

3 votes
Accepted

What does variable-base point/scalar multiplication mean in ECC?

3 votes
Accepted

Altering the message space of Paillier

3 votes

What is "msg = group.random(GT)" in Charm encryption schemes?

3 votes
Accepted

ElGamal signature scheme: Why is r included in s

3 votes
Accepted

Is verification of ring signature always linear in the amount of members?

3 votes
Accepted

Schnorr protocol: how does malicious verifier win?

3 votes
Accepted

What does “simulator” and “interactive” mean in a cryptographic credential system's definition of security?

3 votes
Accepted

Why is the definition of Special-honest verifier zero-knowledge probabilistic?

3 votes

In Elgamal, the generator g is always quadratic non-residue modulo p where p is a safe prime and inverse of g can be also generator?

3 votes

Why is $-1$ an illegal message in the Goldwasser-Micali Encryption Scheme

3 votes
Accepted

Decrypting without using the private key

3 votes

Does ElGamal Encryption create a different key for each block sent?

3 votes
Accepted

Is there an encyption scheme that combines additive homomorphism with ability to proxy re-encrypt?

3 votes
Accepted

Private Messaging

1 2 3
4
5
7