Questions on cryptography and cryptanalysis, encryption and decryption, and the making and breaking of codes and ciphers. Consider posting your question at Cryptography.SE.

learn more… | top users | synonyms (2)

1
vote
0answers
38 views

cryptographic hash functions

Suppose $โ„Ž: ๐‘‹\to ๐‘Œ$ is a hash function. For any $๐‘ฆ\in ๐‘Œ$ , let $โ„Ž^{โˆ’1}(๐‘ฆ)=\{๐‘ฅ:โ„Ž(๐‘ฅ)=๐‘ฆ\}$ and denote $๐‘ ๐‘ฆ=|โ„Ž^{โˆ’1}(๐‘ฆ)|$. Define $๐‘=|\{\{๐‘ฅ_1,๐‘ฅ_2\}:โ„Ž(๐‘ฅ_1)=โ„Ž(๐‘ฅ_2)\}|$. Note that N counts the ...
1
vote
0answers
17 views

Proposed two key cryptography

Q1. I do not understand why e should be public? It may be more secure to keep it private and known only to the sender and receiver. Q2. I need comments on the following proposed algorithm: Both ...
1
vote
0answers
55 views

Generator of group, Computation of discrete logarithm

The prime number $p=67$ is given. Show that $g=2$ is a generator of the group $\mathbb{Z}_p^{\star}$. Compute the discrete logarithm of $y=3$ as for the base $g$ with Shanks-algorithm. Compute the ...
1
vote
0answers
181 views

Given plaintext and ciphertext of the same length, how could one generate potential symmetric keys if encryption algorithm is unknown?

This question is about both encryption and about how and if one could transform data from one given form to another given form and back. I am given plaintext and ciphertext, both of which are the ...
1
vote
0answers
43 views

Latin Squares and Olderogge Code

So I have two Latin Squares, $A$ and $B$ that form a pair of MOLS of order $m$. I then have an Olderogge code formed from $A$ and $B$, where each binary vector of length $m^2$ is encoded as a codeword ...
1
vote
0answers
33 views

Primitive vs Irreducible

Are all irreducible polynomials primitive? If not can anyone give an example of such a polynomial that is irreducible but not primitive?
1
vote
0answers
30 views

Tidy way to represent XOR over the ring of $2^{32} - 1$

I was reading about a cipher called Speck, which defines a system of equations using Addition Mod $2^{32}$ ($\boxplus$), Bit Rotation, and XOR. If we pretend that the additions were taken over $\...
1
vote
0answers
1k views

Modular Arithmetic - pairs of additive inverse pairs and multiplicative inverse pairs

I am taking a Cryptography class and we are working on modular arithmetic. I am still unsure on how to find pairs of additive inverse pairs and multiplicative inverse pairs. I've seen some videos and ...
1
vote
0answers
70 views

provably secure hash function

I have the following question related to proving a hash function is secure if discrete log in group $\mathbb{G}$ is hard. The hash function (Gen,H) goes as follows: Gen: on input $1^n$, run to obtain ...
1
vote
0answers
43 views

Find a polynomial of degree $8$ with integer coefficients with given root

algorithm to find a polynomial $f(x)$ s.t (1) $degree(f(x))<9$ (2) Integer coefficients (3) Absolute value of coefficients $< 10^5$ (4) f(39.770525) =~ 0 about to be <<10^-10 I ...
1
vote
0answers
45 views

Trouble Understanding Pinocchio (Verifiable Computing) Sparse Polynomials

I hope I'm asking the question properly. I've never asked anything on this exchange before, but I didn't know where else to ask. The paper in question I've almost got all the pieces to understand can ...
1
vote
0answers
67 views

Drawing a 5-stage binary LFSR with feedback Sm+5= Sm + Sm+1

Any guidance on how to draw this would be greatly appreciated I know this is more of a visual thing but I also want to go on to determine all the possible (different) cycles that are generated by this ...
1
vote
0answers
120 views

Finding a point on an elliptic curve

I have an elliptic curve with the equation $ y^2 = x^3 + ax + b $ in modulo p, where p is prime. I also have a point G on that curve. How can I find another point that isn't a multiple of G? I ...
1
vote
0answers
57 views

The number of Balanced Boolean functions

Suppose we have n-variable Boolean function (BF) and we know that the weight of a Balanced BF is $2^{n-1}$. The total number of BFs are $2^{2^n}$, Affine BFs are $2^{n+1}$ and Linear BFs are $2^n$. In ...
1
vote
0answers
46 views

Find a particular function given certain restrictions

This maybe more of a computer science problem but maybe the solution lies in number theory. Given integers $x,y$, define a function $f$ so that $$f(x,y) = \begin{cases} 1 & \text{if $x=y$} \\ 0 ...
1
vote
0answers
35 views

What is the algebraic normal form of $F(x,y,z)= Trace (\alpha x^{24}) + x^{312} + yz$?

Let $w$ be a primitive element of $\mathbb F_{5^4}$. Let $\alpha=w^{13}$. Define, $F:\mathbb F_{5^4}\times \mathbb F_{5}\times \mathbb F_{5} \Rightarrow \mathbb F_{5} $ as, $$F(x,y,z)= Tr (\alpha ...
1
vote
0answers
329 views

Solving the discrete logarithm using index calculus, finite fields and factor bases.

(a) Let $p$ be the prime 1073741827, with $\Bbb{F}_p$ the corresponding finite field. A primitive root in $\Bbb{F}_p$ is equal to $g=2$. Use a factor base of primes up to 13 to find the discrete ...
1
vote
0answers
52 views

statistical analysis of discrete (non-uniform) p-values: cryptographical random data test

i'm doing a statistical analysis of a well-known cryptographic algorithm and have hit an anomaly. i need to prove that what i have found is statistically significant. i am taking block sizes of 256 ...
1
vote
0answers
29 views

Single-Digit Errors

I've been assigned the following homework problem: Given an eight digit number $a_1a_2...a_8$ and a check digit $a_9$, $7a_1+3a_2+9a_3+7a_4+3a_5+9a_6+7a_7+3a_8+9a_9 \equiv 0 \mod{10}$ ...
1
vote
0answers
74 views

determining the next random number pseudorandom number generator?

I have given 3 numbers let's say basic example x_0=5, x_1=6 and x_2=2 and modulus p is 7, ...
1
vote
0answers
101 views

Rank of Quadratic Form

Let $n,m, s \in \mathbb{Z}$ be integers satisying $n=s^2$ and $m=2n$. Let $\newcommand{\bigmatrix}[1]{ \begin{pmatrix} #1_1 & #1_2 & \cdots & #1_s \\ #1_{s+1} & #1_{s+2} & \cdots &...
1
vote
0answers
76 views

Closest vector problem

Given is a vector $v=\begin{pmatrix}2,&-1,&0,&1\end{pmatrix}$ as the shortest vector of the lattice $\Lambda (B)$, where $B$ is determined as $B=\begin{pmatrix}4 &-3 & 2 & 0\\ ...
1
vote
0answers
147 views

Given odd number $n$ count the bases to which $n$ is Euler pseudoprime

As the title says we are given an odd number $n$ and wish to find the number of bases $b$ such that $n$ is an Euler pseudoprime; That is, $\gcd(b,n)=1$ and $b^{(n-1)/2} \equiv \left( \frac{b}{n} \...
1
vote
0answers
55 views

$c$ primitive root, $a \in \{1,\ldots,p-1\}, w/ j \in \mathbb Z^+, a \equiv c^j \pmod p), a^{\frac{p-1}{2}} \equiv 1 \pmod p\implies j\text{ even}$.

Suppose c is a primitive root modulo $p$. Suppose you have a particular integer $a \in \{1,2,\ldots,p-1\}$ and you have found $j \in \mathbb Z^+$ such that $a \equiv c^j\pmod p$. Show that if $a^{\...
1
vote
0answers
146 views

Mathematical foundation crisis and the RSA

I am currently in my last year of high school and I am writing a report on cryptography from a idea historical and mathematical perspective. I am including a few of the subjects: Cantor's diagonal ...
1
vote
0answers
146 views

Understanding Quadratic Sieve Algorithm

I am studying Cryptography and came upon the quadratic sieve algorithm. However, I am having hard time understanding how the algorithm works. I kind of understood how the steps are followed through ...
1
vote
0answers
59 views

If P = NP can asymmetric key exchanges still exist?

One functions are easy to compute (ie polynomial time checking) but hard to reverse. if P = NP does that mean that asymmetric key exchanges will be reduced from polynomial computation time and ...
1
vote
0answers
114 views

Decrypting a message without the Private Key

I am given 5 different encryption modulus, N, each ranging from 78 to 88 numbers long. Then for the encryption exponent, each has the same which is 5. Then I am given 5 different encrypted messages, E,...
1
vote
0answers
73 views

Asymmetric block ciphers?

Any block cipher transforms a block of $N$ bits into another block of $N$ bits based on a $\mathcal{K}$ bit key. This can be considered to be a substitution cipher on an alphabet consisting of $2^N$ ...
1
vote
0answers
120 views

Decryption of an Encrypted Message

Suppose we are given sending a message to two people: A and C. A and C have the same RSA encryption modulas: R=(some arbitrary number, say) 454564515456465465465156. But A and C have two different ...
1
vote
0answers
96 views

Why the following observations regarding lattices hold?

The following is an excerpt of a recent paper on lattice cryptography: Let $n$ and $q$ be integers [...], and let $\beta > 0$ . Given a uniformly random matrix $A \in \mathbb Z^{n \times m}_q$ ...
1
vote
0answers
42 views

Discrete Logarithm Problem in $\mathbb{F}_{p}$ and using Elliptic curves

I want to learn about the hardness of the DLP in $\mathbb{F}_{p}$ and using Elliptic curves, and the best attacks against each. I want to be able to compare the hardness of the problem in the two ...
1
vote
0answers
65 views

Questions regarding the use of Index Calculus for finite fields and elliptic curves

Ok I have a few questions that hopefully some people can answer: For the Index Calculus applied to the Discrete Log Problem in $\mathbb{Z}_p^*$. I first thought that if we could find the ...
1
vote
0answers
72 views

Is discrete ultralogarithm harder than discrete logarithm?

Is computing $g^{xy} \bmod{s}$ from $g^{x} \bmod{s}$ and $g^{y} \bmod{s}$ easier harder or the same level of difficulty as computing $g\uparrow\uparrow(xy) \bmod s$ from from $g\uparrow\uparrow x$ ...
1
vote
0answers
45 views

Adding and multiplication in jacobian coordinates

Please tell me how i can to derive formulas for adding and multiplication of 2 points in jacobian coordinates $((x,y)=(\frac{X}{Z^2},\frac{Y}{Z^3}))$ over elliptic curve? Thanks a lot beforehand. I'm ...
1
vote
0answers
61 views

Efficient decoding of irreducible binary Goppa codes and the role of matrix P in McEliece cryptosystem

If we assume that the support for an irreducible binary Goppa code $\gamma_1, ..., \gamma_n$ is publicly known, when is it possible to efficiently decode the code? I know it's possible if one knows ...
1
vote
0answers
103 views

Mathematical Basis of OAuth Encryption

There are numerous explanations of the common public-private key system available online, explaining how large primes are used to encrypt messages. Is there any similar guide to the mathematics of ...
1
vote
0answers
441 views

Diffie-Hellman key exchange public key calculation

I encountered a question that I can't seem to get around it. Lets say user A and B uses the DHKE defined over $GF(2^8)$ induced by the irreducible polynomial $x^8 + x^4 + x^3 + x^2 + 1$ and the ...
1
vote
0answers
138 views

How to proof this equation without calculating the values it self

I have the following equation. $$(X + a)^n\equiv(X^n + a)(X^r - 1)\bmod n.$$ This is part of the AKS algorithm. The problem is, that I'll have to solve this equation for every $1\leq a<10$ and $...
1
vote
0answers
55 views

Algorithms for Performing Large Integer Matrix Operations w/ Numerical Stability

I'm looking for a library that performs matrix operations on large sparse matrices w/o sacrificing numerical stability. Matrices will be 1000+ by 1000+ and values of the matrix will be between 0 and ...
1
vote
0answers
121 views

A variant of the “closest vector problem” (CVP) in lattice-based cryptography

Consider a public-key scheme on lattices, such as GGH. The private key is a basis $\mathbf{B} \in \mathbb{Z}^{m \times n}$ of a lattice $\mathcal{L}$ with good properties (such as short nearly ...
1
vote
0answers
97 views

Finding the random $r$ in a Paillier encrypted message with knowledge of the private key.

In the Paillier cryptosystem, suppose that I know a Ciphertext encrypted with some unknown random $r$ i.e. $$C = (g^m r^n) \bmod n^2 $$ I know $g, n$, the prime factorization of $n$, i.e., $pq$. I ...
0
votes
0answers
11 views

Effect of seeds on the generation of keystream from a LFSR

I have a question regarding something I noticed about LFSR seeds. I tried different seeds in a simple LFSR with polynomial of โ€œx4+x+1โ€, most cases I got equal amount of 1s and 0s in the keystream ...
0
votes
0answers
40 views

dining metaphysicians

I thought I'd read about this problem years ago, but cannot find the answer online. There is a more well-known dining philosophers problem that is vaguely similar. https://en.wikipedia.org/wiki/...
0
votes
0answers
19 views

Discrete Logarithm vs Integer Factorization

Can anyone please tell me if finding discrete logarithm is considered more difficult than integer factorization? We have very advanced methods to find factors of large composite numbers like Number ...
0
votes
0answers
9 views

Need help in Hashing to create a fingerprint

Given a pattern P of length m and a text T of length n (n >= m), in which all characters ...
0
votes
0answers
41 views

On Pohlig-Hellman prime power discrete logarithm algorithm

If $p,q$ are odd primes and suppose we know $x\bmod 2^rp^tq^u$ in $g^x=h\bmod q$ where $2^{r+1}p^{t+1}q^{u+1}|\phi(q)$ and $g$ generates $\Bbb Z_{n}^\times$ then what is the procedure and complexity ...
0
votes
0answers
8 views

Why the light contrast of a set $\mathcal{E}$ of VCRG produced by an encryption scheme for a binary image B is defined as follows

In the paper "Image encryption by multiple random grids, Shyong Jian Shyu, 42(7):1582-1596 ยท July 2009" here, the light contrast of a set $\mathcal{E}$ of VCRG produced by an encryption scheme for a ...
0
votes
0answers
19 views

Brute force through the Diffieโ€“Hellman key exchange

I was reading about Diffieโ€“Hellman key exchange example on wikipeida: Alice and Bob agree to use a modulus $p = 23$ and base $g = 5$ (which is a primitive root modulo 23). Alice chooses a secret ...
0
votes
0answers
35 views

If $n$ is divisible by a perfect square then $n$ is not a Carmichael number.

If $n$ is divisible by a perfect square then $n$ is not a Carmichael number. Going through the proof from Neal Koblitz's A Course in Number Theory and Cryptography...I am facing some difficulties to ...