Posts
X25519 DH using a single key
What happens when an X25519 DH process is performed using a private key and the public key derived from it? I've tried to find any work on this question, and my Google-fu is coming up short. Is the resulting shared key particularly weak? Does it reveal anything about the private …
Reviving an Old Thread on Airgapping
Hello! I was wondering if anyone has utilized the relativity new/old rubber ducky tool by Hak5 on your airgapped machine and if it’s subtle or clonky. I was unimpressed by the video demonstrations…the reason I’m asking is I was curious as to the utility of putting an airgapped machine in …
Going from KEM to Signatures
Is there a known efficient way to generically convert a secure KEM into a signature scheme? I'm looking for a method that doesn't devolve to turning the KEM into an OWF and then building a hash based signature scheme. I am aware that you can use a secure KEM to …
What are the potential cryptographic applications of the Deligne-Lusztig theory being solved?
question about web crypto subtle ecdh shared secrets
hello everybody, is there any way to generate an ecdh key with javascript in a browser and with c on a backend? how are the common secrets calculated? im trying to get a edch shared secret in a browser and on a backend without using subtle on the backend itself? …
End-to-End Encrypted Cloud Storage in the Wild: A Broken Ecosystem
ML-DSA secret norms?
I was performing vivisection of an implementation of ML-DSA and noticed that the L2 norms of the secret vectors were longer than I had anticipated. My understanding (which could be incorrect) was that for a secret to be short enough it should fall within 0 ≤ |x|\_l2 ≤ B, where …
Thoughts and Opinions About SQIsign?
What are your thoughts and opinions about SQIsign, the post-quantum digital signature?
When using Groth16, is it really needed to change both G₂ points of the public & private inputs in the trusted setup for avoiding public input forgery ?
First remember ᴇɪᴘ‒197 only allow to check if a set of pairings is equal to 1 in Fp^(12) and not to compare equalities like in Zcash which is why the equations below are different and would worth downvotes on a cryptographic sub as a result… # For those who don’t …