r/crypto
Posts
SP 800-38D Rev. 1, Pre-Draft Call for Comments: GCM and GMAC Block Cipher Modes of Operation
Skip Ledger: a commitment scheme for ledgers
Greetings, I drafted a paper over the holidays about a commitment scheme for ledgers and ledger-like data. My paper might not be much.. but the scheme itself, I think, is powerful. I've yapped about skip ledger on reddit before, but at the time, I didn't know some terms of art …
Do Keccak and Poseidon have the same security arguments?
Keccak and Poseidon are both sponge constructions. Keccak’s permutation function is uniquely invertible. This simplifies and strengthens security arguments. Keccak hides 256 bits of internal state when producing an output, so as long as the permutation is chaotic, Keccak is secure. Is Poseidon’s permutation function uniquely invertible? Can you find …
Is there a name for this ‘inverse MOV’ attack and does it work in specialised cases?
The MOV attack works by choosing an elliptic curve with a small embedding degree then using a Tate pairing to map from the curve to a finite field, where the discrete log is sub-exponential. Can you go the other way? Choose an elliptic curve over a small (~ 2^24 ) …
Bulletproofs Question: How does it prove both a proof of knowledge of the vectors and also the innerproduct?
This is about the Bulletproofs zk Proof protocol - https://eprint.iacr.org/2017/1066.pdf (I am going to use additive notation instead of the multiplicative notation used in the paper to describe my question) Prover knows 2 vectors **a** & **b** such that their inner product is c. She creates a binding (but not …
Regev's cryptosystem
Hello, i'm sort of confused by a small point on Regev's pke. Say that the the public parameters is (A, u) = (A, s\^t A + e) with A matrix, s the secret key, e an error. I see that in the original paper as well as in follow up …
PQConnect
Don’t Use Session (Signal Fork)
Looking for HSM opinions
I need to buy an HSM for a project (need it for compliance with government regulations) and I am kind of confused. Price range is really wide. I can see used THALES nCipher HSMs on eBay for as low as 300$ and as high as 10,000$, even though modules are …
Undergrad Research in Cryptography Prerequisites?
Hi, I'm a dual CS & math major. I've been accepted into a mentorship program of sorts and will have the opportunity to do (likely remote) research on a topic (if I find a PI) I'm interested in crypto and have studied the standard intro class to cryptography (classical ciphers …