# Tagged Questions

Questions on cryptography and cryptanalysis, encryption and decryption, and the making and breaking of codes and ciphers. Consider posting your question at Cryptography.SE.

28 views

### Prove entropy theorem

Doing a course of cryptography I have been asked to prove the following: $H(X,Y) = H(Y) +H(X|Y)$. But I simply do not know where to start, so a hint in the right direction would be very much ...
26 views

### How to expand Diffie-Hellman key exchange for multiple users?

To provide OTR (off the record) security for XMPP group chats we've discussed an idea for a Diffie-Hellman key exchange algorithm for multiple users. It should work as follows: Choose a cyclic group ...
11 views

### Efficiency of McEliece Cryptography

Most of the sources say McEliece has never gained acceptance because of its large size of private and public keys. However I have never heard about the size (or length) of its ciphertext. For example, ...
39 views

### Security of such cryptosystem design?

Is one able to reveal $m$ when $$С = (m + r)^e \bmod N$$ $C$ is known $r$ is known $e$ is known $N$ is known and not prime
20 views

### Converting Walsh coefficients to values of a function

I assume I know the Walsh coefficients of a function f: $\mathbb{F}_{2^n}$ to $\mathbb{F}_{2}$. Is there any efficient possibility to get the values of the function f ?
142 views

20 views

### Type(s) of Hashing function that keeps the ordering information

I am asking this question from a perspective that we need to store a set of hashed data that can be queried later for in an ordered fashion. My situation is that some data has to be encrypted, I am ...
156 views

### Primality of $2^{255}-19$

I need a test for primality that I apply to $2^{255}-19$ (which is claimed to be prime) and certify to be correct with the ACL2 theorem prover. This means that I must be able to code the test in ...
40 views

### How to find the period of a recurrence relation

Given the recurrence relation $s_{i+5}=s_{i+1} + s_i$ over $\mathbb{F}_2$ with initial states $s_0 = 1, s_1 = 1, s_2 = 1, s_3 = 0, s_4 = 1$ What is the best/quickest way to find the period of the ...
89 views

### How do you find the smallest legitimate encryption exponent when you are only give a p and q value in a given range?

I have been given this as an assignment question but I'm not sure approach it. EDIT: Sorry I should have added more details. It is a cryptosystem using the RSA scheme. p and q are both old prime ...
119 views

33 views

### Factor RSA number $n$.

An RSA number $n=p\cdot q$, where $q=2\cdot d +1$, $d$ an odd integer, is given. Assuming $a \in \mathbb{Z}_n$ with $a^4=1$ and $a^2 \neq 1$. How can this information lead to finding $p$ and $q$? I ...
24 views

### How to define a one-parameter family of probability distributions

I am trying to evaluate a noise-source as a means of providing entropy to a random number generator. I am running into trouble when it comes to determining the probability distribution that has the ...
47 views

### Is the Legendre symbol with respect to a large prime usable as a pseudorandom generator?

Take an output length $\ell$ and a random seed $s \in \Bbb Z_p$ and a large 1000-bit or so prime number $p$ and output the Legendre symbols of $s, s+1, \dotsc, s + \ell - 1$ with respect to $p$. ...
175 views

### Chinese remainder theorem - RSA

The following is a excerpt from RSA Decryption correctness proof (section 4) : \begin{align} C^d &\equiv M\pmod {p} \tag{1}\\ C^d &\equiv M\pmod {q} \tag{2} \end{align} Now by the ...
306 views

### Sum of product with primes

Let $b=e_1e_2,\ldots,e_n$ and $b'=e'_1e'_2,\ldots,e'_n$ be two distinct bit strings of equal length $n$ with same number of occurrences of zeros and ones. The bit string $b$ and $b'$ also must have ...
109 views

### Cryptarithm - Interesting Math Problem

This is a very interesting cryptarithm that I came across in an old textbook of mine. It is named accordingly as a tribute to the late Bob Marley (singer). Cryptarithm - Tribute to Bob Marley In the ...
55 views

### FSR function of the component-wise product, sum, of two LFSR sequences

Let $T_1$, $T_2$ be two $m$-sequences over $\mathbb{F}_q$ of length $q^n-1$, say $T_1 = (\text{Tr}_{q^n | q}(\alpha^i))_{i \geq 0}$, $T_2 = (\text{Tr}_{q^n | q}(\beta^i))_{i \geq 0}$, for some ...
96 views

### Foolproof primality test

I just happened to hear about a prime number test which works 100% of the cases in an university lesson about cryptography. It should be something like: if $p$ divides every coefficient of ...
25 views

### How do I construct the S boxes of the following boolean function?

$f(z) = \dfrac{az+b}{cz+d}$ Where $ab-cd$ is non zero. I have already constructed the sixteen element Galois field, but how do I use the function to construct the $S$ boxes?
### find the last digit of $347^{61}$
I need help with the question, "find the last digit of $347^{61}$" . I don't know where to start, I know that it requires modulo arithmetic but I can't think where to start, this is all the question ...
### Multiplication modulo $n$
I encountered the following basic encryption scheme while studying MIT OCW's 6.042 course: Exchange a public prime $p$ and a secret prime $k'$. Encryption: Compute $m'=rem(mk, p)$ ...