Posts

Suppose Raghavendra wants Pratik to compute a function $f(x)$ on his secret input $x$. The obvious naive method could be to send $x$ to Pratik who can then compute $f(x)$. What Raghavendra really wants is something slightly strange: Pratik should learn the result of the computation without necessarily learning the input to the computation. ...

Everyone learns Diffie–Hellman as a party trick with paint colours. The trick is fine. What it hides is that the security of the protocol does not rest on the discrete logarithm problem, and the gap between the two matters in practice. ...