4 ms·
>any optimization that doesn't exactly and exactingly preserve the distribution almost always turns out to introduce exploitable vulnerabilities Not a crypto e
by _0ffh 5y ago
>any optimization that doesn't exactly and exactingly preserve the distribution almost always turns out to introduce exploitable vulnerabilities
Not a crypto expert, but aren't there changes to the distribution that you actually want to make, like having a lower size limit for each of the factors?
- a1369209993 5y ago> aren't there changes to the distribution that you actually want to make Yes, but that isn't a optimization, it's a deliberate change in semantics. > like having a lower size limit for each of the factors? For some reason, a annoying amount a cryptography literature uses "1024-bit integer" to mean "a (arbitrary-precision) integer whose most significant set bit is in position 1023". I probably should have phrased that better to avoid confusion with "a integer stored in 1024 bits of memory".
- _0ffh 5y ago>For some reason, ... Ah, that clears it up, thank you!