Lecture 3: Stream Ciphers, Random Numbers and the One Time Pad by Christof Paar

[@Yuri-bt4wl]

*Topics* 1. Stream Ciphers 0:15 2. Random Numbers a) RNG (Random Number Generator) 37:10 b) PRNG (Pseudo Random Number Generator) 44:00 c)CPRNG (Cryptographicly Secure Pseudo Random Number Generator) 51:30 3. One Time Pad 1:00:30 4. LCG (Linear Congruent Generator) PRNG 1:15:15

[@An.Individual]

Tells someone to shut up 5:54

[@maddineniamaranath5104]

Tq very much dear for providing info

[@huy130189]

Thank you so much for sharing this course for free. You are such an amazing professor. Academic needs more talents like you. Thank you sir

[@chrismcknight7164]

I set my alarm for the middle of the night to watch these so I can literally follow his instruction to "go back to sleep"

[@Mindraker1]

"The next 120 seconds, are going to be very important in your life!"

[@mbharatm]

I can't believe that there are students who are sleeping / not paying attention in this class. I'm watching the video at midnight and I'm having my eyes wide open marvelling at the simple way in which Prof. Paar explains step-by-step some of the most cryptic (literally) stuff!

[@miguelgarciaroman7040]

Lit me right now xd

[@moshewiener4049]

Many thanks to Prof. Paar for the most interesting lectures I even learn few German words as a side benifit of the lectures ...

[@HeikkiKetoharju]

These lectures are so good! They make a perfect pair with the crypto-textbook. The most fascinating course I've had so far in my studies.

[@moosagaming7519]

First time listening Professor Christoff Paar on Cryptography. Very nice lectures Great pace and way of teaching Stay blessed Professor Dr Zaheer Center for Mathematical Sciences Pakistan Istitute of Engineering and Applied Sciences Islamabad Pakistan

[@dshock5529]

studying Crypto for CCNA Cyber Ops, these lectures are amazing. I'm learning so much, great job Professor

[@freshman04]

Thanks a lot for these wonderful lectures! I have seen many engineering online lectures, but the way you teach is very educational and exceptional.

[@subhsamal5948]

I like the way you are teaching. :) I wish I could attend your classes!!!

[@Tentix]

Better think about what you wish for...

[@slaozeren8742]

@@Tentix trust me, I really want to attend his classes.

[@rqd3]

you already are

[@mr.shanegao]

Stream ciphers 0:01 Random number generators(RNG) 37:20 OTP 1:00:30 LCG 1:15:20

[@chrisnkevy]

Mr. Paar, where did you learn everything you know? You are a highly intelligent individual, anyone can tell just based off how you teach. I'm only 15 and I'm understanding what you are teaching, you really know what you are talking about and that is shown in the way you break down these ciphers and explain them in detail.

[@kingdominth4]

Why take german and cryptography, when you can learn them both at the same time? (lol) Great Lecture by the way.

[@artads8745]

haha.. am a beginner crypto learner. are you a beginner?

[@kingdominth4]

Yes

[@abhilashr6279]

me tooo

[@thebudkellyfiles]

Thank you. You really make this subject fascinating.

[@ramkumarnj7617]

I'm your die hard fan already!! Great Lecture!

[@beckychiang2667]

Dear Professor Paar, when I was watching your explanation on the OTP, I suddenly wondered if this is how the ancient Chinese encrypted their messages. We Chinese use characters, and the most commonly used ones are of a whopping number between 3000-5000. During war times, for secret message exchange, people write a seemingly normal message, but you need a sort of mechanism to see the original message. It's a message in a message.

[@pandalanhukuk804]

good question but still Chinese government controls Chinese people in a good way.

[@weiwang9462]

@@pandalanhukuk804 Good Answer but looks like you are suffering fake news.

Professor Paar, in 55:40 when you say that is computationally infeasible to construct Sn, you mean Si+n right? i.e the next key after Si+n-1

[@introductiontocryptography4223]

exactly.

[@CreativeVery]

Right when you wrote down the symbol for modulo 2, I knew XOR was going to come up.

[@Integralsouls]

*k*

[@CreativeVery]

@@Integralsouls What a crazy response to a 4 year old comment.

[@lidiyajoy4994]

Excellent teaching! Professor!!

[@maomxesoax2471]

Regarding OTP... store random mouse moves collected in an array up to the size needed to encrypt the message, each time you need a new random number array, easy. Encrypt the message one to one with the random array and you only need a random array as large as your message, so message x 2 is the final size. Embed the encrypted message in a picture using steganography. First send the key embedded in a picture with an RSA encoded password (known to the recipient). Then send the picture with an embedded encrypted message. Works better if the message is also embedded into text (ie: ipsum lorem) that will fill the whole picture, so that changed bits in the picture don't stand out. Already wrote this program, handling LF's was a problem but sorted now. A 520x520 bit picture will hold about 72k of characters.

[@joshinils]

53:50 lol, for the viewer thats a conundrum

[@maxinator80ify]

That took me way to long...

[@DeckSeven]

Sehr gut! Very good lecture of my favorite cryptography topic! Most of the stuff lectured here I already knew, but I learned a few additional things here, such as that XOR is actually Modulo 2 (Mod2). I never realised that. I'm continuously developing my own XOR stream/block ciphers for years now. Strong OTPs can be generated by TRNGs and CSRNGs with high randomness factor on the bits. That's the best way imo. PRNGs are deterministic and crap for encryption purposes indeed, because once an attacker knows the seed he can regenerate the whole sequence of random keybits.

[@florianwege7563]

Hm, the definition of a PRNG as shown does not fix a pattern where only the seed depends on the secret key. The key could also be an input to later PRNG rounds. The LCG shown in particular proved problematic because a property of the assumption was that there are more plaintext bits known than the amount of unknown variables in the PRNG function.

[@FelipeMontealegreS]

This man is an American hero

[@Soedmaelk]

Great lectures, Christof!

[@Shinta007]

Great information! Learning this becoming much more fun and meaningful. Thank you!

[@futurDaFutur]

Thank you so much for this course and also for the books which is an easy to read great information place !

[@benjones952]

Surely the LCG is even worse for cryptography: we showed that Oscar can break it by knowing (x1,x2,x3). Even if they didn't know those values, there are only 8 possibilities so he can find 8 pairs of (A,B), exactly 1 of which is the solution. Trying them out against the rest of the ciphertext narrows down the possibilities even more. Knowing a linear generator is weak, my first impression would be to go to higher order polynomials (perhaps I'm anticipating future lectures here) -- from trying it out, solving systems of polynomial equations in n unknowns is a hard task.

[@GrahamCrannell]

Firstly, this lecture series is great. Super clear and concise. The slides on the website are also very helpful. Secondly, at 28:00... since we're encoding/decoding 7 (or 8) bits at a time, isn't the stream-cipher just a very small block-cipher? The "block" in this case being a single byte?

[@halildogan6435]

Thank you Professor, great lectures

[@teenfoe]

During the Cold War and even now One-Time Pad messages are sent to agents via clandestine shortwave radio stations known as Numbers Stations. These stations would read out the encrypted messages usually as strings of 5 digit numbers and the agent who is meant to receive one copies the numbers down and then decodes them with the OTP given. Most of these Numbers Messages cannot ever be decrypted because most agencies were very careful with not re-using keys. But eventually they ran low on resources and had to recycle whole keys and parts of keys etc. If you ever reuse a key for two different messages, then cracking both of them is child's play. Now if you reuse the same key for the same message sent with that same key then it does not matter because the numbers would be identical and you are nowhere closer to cracking it then you were when you first intercepted it.

[@raybroomall8383]

today radio transmissions are sent in coded packets one each packet is sent on a different channel (AM or FM frequency) deciphering the header of the packet identifies the next channel. Oscar has to be in real time to even capture the data beyond a single packet. To make it more interesting trojans are also sent on other channels to create a noise level that masks the real message. Channel sequences are chosen from an OPT and cover a very broad RF spectrum.

[@26floydlobo26]

thank you sir for all this information your teaching methods are good too

[@acudoc1949]

What a nice teacher! Was fuer einen Mensch...

[@raybroomall8383]

Entanglement offers an interesting way to pass data encryption keys. Assuming entanglement systems are difficult and expensive it may not be practical to transmit data this way but the secure key is a smaller data set.

[@avizzzy]

Great lecture and I envy those students out there for having a lecturer as such. The lecturer we have in our university in Holland is nowhere near this lecturer, sadly of course.

[@cosmicad1985]

Great Lecture Sir ...Few Doubts as Below :- 1)How Do we Get Seed Value.... 2) How Does a PRNG Developed. 3) How Do We Get The K Value Mentioned in 1.20 ....

[@introductiontocryptography4223]

+Cosmic D I hope the following helps: 1.) The seed often comes from a true random number generator. Many modern digital systems have access to some source of randomness. 2.) not sorry what you mean, sorry. 3.) This is the KEY. It must be somehow established between the two communicating parties.There are various ways of doing this in practice, i.e., using some key establishment protocol. regards, christof

[@cosmicad1985]

+Introduction to Cryptography by Christof Paar Thanks For the same .....Sorry To say..but I could not understand deeply about anything regarding my doubts/....Could u pls Let me know some topic which can make this Clear....

[@sebastianschubert7945]

I am sorry I was actually doing KZbin while listening to you professor.

[@kishsaam]

Legendary as always...

[@prakashgourav]

Great lecture again, would have loved to see some more practical examples of OTP and LCG. And any real life applications of OTP.

[@daviderigato6230]

Dear professor Paar, thank you for sharing. I would like to know if it is correct to say, at the beginning of the last exercise (1:22:45), that the system (attacked by Oscar) can be solved due to the Rouché-Capelli theorem. Thank you

[@jerrymahone335]

read this pdf " An Encryption Algorithm Based on ASCII Value of Data".

[@taylorrowan2852]

Enjoying your lectures. I am purchasing your textbook, which other books/textbooks would you recommend over Cyber Security?

[@allanargamer5812]

What about the number stations that broadcast letters and numbers all around the world in the HF radio spectrum.? Are they using one time pads? It seems like the only thing they could be using.

[@vijjibabu1]

Excellent lectures.

[@nemuchan200]

Thank you so much for this amazing lecture !

[@birindersingh7401]

amazing lecture. hope i have a lecturer like you in my college...Thanks for uploading videos.

[@preethicarmel5513]

Was there a follow up course. Can that also be shared please. Thankyou so much

[@introductiontocryptography4223]

thanks for your interest. Unfortunately, There is no follow-up course. However, my current plan is to release 2 new lectures on post-quantum crypto, which I plan to teach in the "Sommersemester" of 2025. If things work out, I will release them ca. July '25.

[@braa194332]

1:25:37 why isn't mod(m) an unknown? Thank you very much for this wonderful lecture

[@introductiontocryptography4223]

No, the 2 unknows are A and B. We assume that the modulus m is known. (Sorry, I should have included m in the list "Oscar knows ..." Cheers, Christof

[@gaganaggarwal7981]

@@introductiontocryptography4223 How Oscar will know 'm' if he is just having the information about the header of a file?

[@HeikkiKetoharju]

@@gaganaggarwal7981 Well, if it is a bit stream, then I suppose the system is mod 2, because bits only have two values: 0 and 1. That was the presumption during this whole lecture, if I'm correct?

[@krzaq666]

@@HeikkiKetoharju if you look at the wiki ( en.wikipedia.org/wiki/Linear_congruential_generator ) the m values are much different, though the set is small enough that you should be able to iterate over all of them. That being said, if you xor full bytes, then you're likely to discard the higher bits of the LCG output. I wonder how much more work it is to break it in such case.

[@steven4158]

Hello Prof Parr Again thank you for the best crypto course on the web. I have a question with relation to this video. The OTP as referred to as a perfect cipher (unbreakable) however that is not my particular understanding. As I understand this and I could be wrong is that the OTP is perfect only in the following sense. For a cipher text only attack the probability of decrypting the message is exactly the same if you have or don't the ciphertext. In other words even if you have infinite computing power having the cipher text doesn't help to decrypt the message since the message space and key space are of equal (at least) or greater size (key space) every possible decryption of the message with every possible key yields a potentially valid decryption and there is no way to differentiate what the original message if is an attacker has the cipher text. It doesn't help. This only holds true for ciphertext only attacks. In other ways the OTP is actually a weak cipher. Any thoughts on this would be greatly appreciated Thank you Steve

[@mdtanveerhasan1453]

Did you find your answer?

[@zilverdrago0]

Excellent lectures!

[@anupkodlekere3633]

I wasn't paying attention but was listening to the lecture, and at 5:58 he stops and says "Hello!", I thought he said that to me lol

[@DasFengster]

Why is binary bitwise XOR preferred over decimal adding? Is it just because it's faster to compute or are there security advantages too?

[@introductiontocryptography4223]

If the entire key is truly random, decimal adding (adding with carry bits) will work too. However, bitwise XOR makes many things easier: It is faster, one can encrypt individual bits independently of its neighbouring bit and the security argument is easier: By intution, if an attacker sees (e.g.,) a 0 on the channel and the key bit is truly random, there is exactly a 50% chance that the plaintext bit was 0 or 1.

[@yahiaayash3922]

u r amazing teacher ,, thanks from turkey by palestinen engineer

[@jamesoleksyn4067]

At Timestamp 1:11:12 you asked us how big the key is in the example for a 400 MB movie. I'm not sure I follow how you arrived at 3.2 GBs for the encrypted file. I do understand that any key in a OTP is going to be as big if not bigger than the original message.

[@introductiontocryptography4223]

You are right. I just tried to convert from MByte to MBit, and multiplied the 400MByte by 8 :) I find counting the bits more instructive since the OTB is bit-oriented

[@steveking7719]

Can you generate a random "Key Stream" then swap the keys by using Diffie-Hellman and do a new key every hour over the cell infrastructure?? Feasible or not?

[@riyamnoori6501]

Thanks Prof... it was Amazing lecture

[@drzahidmahmood293]

Dear Professor Paar, one thing is confusing me a lot that is understood than Random numbers generate by the sender applying any of define methods and one of them is CPRNG which is infeasible for anyone to generate same pattern. My question is that how receiver computes the same pattern using CPRNG or any other method for deciphering received message? What I understood is that both sender and receiver share pattern function for CPRNG using any other secure channel.

[@imaddinamsif]

Wonderful job professor, i think that people like you allow students to progress. Congratulations. Now, i have a short question. In your book that is amazing in otp you put 3 requirements but now in your explanation you omitted the second one which say the key stream is only known to the legitimate communicating parties. I think that i will get erasmus from Valencia (Spain) just for being in your classes ajjjjajaa. THx

[@mchenoboe]

We learned that LCGs/PRNGs wouldn't work at the end of lecture for getting the Si, but what would work? A CPRNG?

[@introductiontocryptography4223]

+mchenoboe Exactly. The big question is: What are good CPRNGs? In practice, CPRNGs are simply strong stream ciphers. If you go to the eSTREAM web site you'll find recommendation for secure stream ciphers. (Unfortunately) I do not say much about strong stream ciphers in these lectures. Regards, christof

[@MintMoar]

I'm confused because at the end of the lecture you present a stream cipher schematic that uses PRNGs and you say this is how all practical stream ciphers work. Then you continue about the LCG and conclude that this is a bad way of doing stream ciphers. What am I missing?

[@nischalbhandari9964]

very practical lectures....thank you

[@kamal_pratap]

Can we say that LCG uses Affine Cipher after getting seed value from PRNG? It looks like S2 = A. S1 + B where A and B are part of Key.

[@asanthiudawatta8742]

Awsome lecture...thank you sir...

[@larslidgren]

In 1:24:20 Oscar finds/intercepts x1, x2 and x3. You say: he(Oscar) also computes S1, S2 and S3? How can he compute them without the key? Isn't he intercepting s1, s2, s3 also? Thanks for interesting lectures!

[@introductiontocryptography4223]

No, he is not intercepting the s_i (they cannot be intercepted, they are internal values computed by Alice). He only sees the y_i's on the channel. But if Oscar also knows some x_i, computing the corresponding s_i is trivial since y_i = x_i + s_i mod m and thus: s_i = y_i - x_i mod m The question is what the other s_i's are that he does not know already. They can be computed via s_j = A s_j-1 + B mod m *but* Oscar needs to know A and B for this. -- And that's the point of my exercise after 1:24:20 :) hope this helps, regards, christof

[@jaedongtang37]

@@introductiontocryptography4223 I still have a question about how to compute S1, S2, S3. y_i = x_i + s_i mod 2 (where y_i is encrypted bitwise by x_i and s_i. This is the first equation in page 40 of the book). But latter, s_i is computed as s_i = y_i + x_i mod m, i = 1,2,...300 (which is the second equation in page 40). could you explain why the computation changes from mod 2 to mod m?

[@amitkrthkr]

Why should the One Time Pad ( Key stream bits) be used only once for it to be secure?

[@bananian]

So Oscar gets some plaintext, xi, from file header info but wouldn't he need the encrypted counterpart, yi, in order to calculate the operator, Si?

[@stefanosorfanos7153]

Oscar intercepts everything that passes through the insecure channel of communication between Alice and Bob, so he does have the y's

[@hachimitsuchai]

What is m in (mod m)? Whatever modulo the situation calls for? i.e. mod2 for binary, mod26 for Shift cipher etc? Or is m specific to this lecture?

[@hingz9282]

Professor Christof Paar, I don't understand why 1 + 1mod2 equals to 0 and not 2? 1mod2 equals to 1 if I'm not mistaken, hence 1 + 1 = 2. What am I missing at 19:39?

[@realGeezus]

I think it should be (x+s)mod2. After this everything makes sense. Also in the shift cipher, if we do (x+k)mod26, it gives the desired results.

[@realGeezus]

Someone correct me if I am wrong. Please. I too am learning.

[@msmosgigi4843]

no you are right the answer is 2 but 2 isn't in the Z2 set its either 0 or 1 so 2 is equivalent to 0 because 2=2mod2 which is 0 .i hope helped :D

[@TheResonating]

and also to add, thanks for uploading these! I'm trying to find how mathematics is used in cryptology.

[@TheGenerationGapPodcast]

learn python. last equation could be done in python by modelling A and B as 2 lists [((si * a) + b) for a,b in zip(A,B)]

[@TheGenerationGapPodcast]

I cant type it out correctly now do math using python libraries pandas, NumPy, scipy

[@unchaynd7266]

53:52 Christof Paar: "don't do KZbin at this moment" Me watching this on KZbin: 😦

[@DiSENT100]

When Christof teaches that CSPRNG, it is in-feasible to compute Sn+i and not Sn.. right?

[@shiyuphan6319]

thank you for the great video

[@bhattago]

Hello Prof..Thanks for the amazing lecture series.. I had couple of questions on OTP.. 1. Even though the key size would be "huge" in case of OTP but theoretically with infinite computational resources, it would still be possible to break it [ 2^3.2G computers can do it in 1 step]. 2. Further, if the message size is really small (16 bytes), wouldn't OTP be a weak algo in that case ?

[@introductiontocryptography4223]

Good point. This is a (well-known) paradox of the OTP. You are absolutely right, if the message size is small, one can of course try all possible OTP keys. The point here is, however, that you will NOT be able to tell when you have found the correct key UNLESS you know the plaintext already. Very good observation, though. hope this helps, christof

[@bhattago]

+Introduction to Cryptography by Christof Paar ..Thanks Prof for the response.. If I got you right, decryption would produce just a stream of bits and hence one could never tell if it were the right key (unless the original plain text was a meaningful english sentence/paragraph for which u don't need to actually KNOW the plain text)

[@introductiontocryptography4223]

Almost correct: Let's assum the plaintext were a 6-letter ASCII string, e.g., ATTACK. If the adversary performs an exhaustive key search he would generate "ATTACK". But he would also generate "attack" and "SECRET" and "peace!" and "turkey" and "pay50$". Thus, unless he knows a priory what the plaintext is, he will not know what the correct one is.

[@bhattago]

Introduction to Cryptography by Christof Paar Yeah..that's quite possible given the richness of a language :).. However, I feel probability of this collision would reduce as the input text becomes longer.. Thanks again Prof...

[@MrMetalMachine1]

The keyspace grows, with the length of the message, it's always as big as the space of possible messages. For Exampe: If you have ciphertext of 100 bits lenght, there are 2^100 possible chiphertexts. The key is an equaly long string of random bits, so there are 2^100 keys, and every key leads to a different Plaintext. That means you can get any Plaintext of equal lenght. And because the key is truly random, all the plaintexts are equaly likely.

[@florianwege7563]

55:40 This should be S_(i+n) rather than S_n, shouldn't it?

[@mamtarani4772]

GREAT LECTURE SIR THANK YOU

[@fredxu9826]

i wonder if the Zodiac Cipher is a kind of One-Time-Pad

[@pradeeppvl7983]

Great lecture

[@walterreuther1779]

1:00:00 Chapter 3 - One Time Pad

[@ebunonanuga6267]

Hi Professor, i love security so find your videos a great way to go above curriculum and prepare for a undergrad in computer science. I was thinking isn't it possible to change the key values after each byte is encrypted with a LCG. This way any attacker knowing the first few bits would find it very difficult to get anywhere into the data. My idea is similar to some public key encryption. Using some trap door function to generate a new key (A,B). The idea uses an elliptical curve on both PRNGs that will compute a new key. If point (A,B) is x, it will compute x^m (mod m). This new point will be the corresponding A and B values for the next 8 bit Si values. For the next 8 bits, it would compute x^m+1 (mod m) and so on. This way knowing A and B from the first byte will not allow you to obtain the next A,B key without knowing the equation or having some prior idea of what the message is. The simultaneous attack breaks down if you get s8 and s9 as the A B values will be different. Is this a practical solution?

[@nnicolas17]

If you have a trapdoor function why not use that to generate key bits and drop the LCG entirely?

[@Zenwork]

Great lecture, you lost me at the end, :-) Many thanks

[@abstractapproach634]

40:49 did he mean to say chaotic natural processes (I think there are random natural processes on the quantum scale but I'm not sure. I know more classical)

[@sammyrajoy]

Professor Christof Paar, at 50:18, how did you get the value of Si + 1? is it just a random value or is it a constant or a derivated value

[@sammyrajoy]

I'm asking about the value 1103515245

[@sammyrajoy]

Also, could you please help me understand why we wrote 2 ^31 because we haven't talked about 31. I understand mod 2 is because there are only 2 digits - 0,1 in the set. But not sure about why to the power 31.

[@introductiontocryptography4223]

This (admittedly strange looking) number is simply part of the standard of the ANSI C programming language. The number is being used in the standardized function rand().

[@introductiontocryptography4223]

The short answer: See above, reduction modulo 2^31 is also specified in ANSI C for the rand() function. There is a very good reason behind it: computing mod 2^31 is very easy on a computer -- one simply takes the 31 least significant bits of the operand. In particular, one does not have to perform a division for computing 2^31. cheers

[@dd9516]

Nice lecture...as always. One question, though. If S, A and B are strings of bits then why is this still called a 'stream' cipher? Why not a simple block cipher? Thank you.

[@softwarelivre2389]

Steam ciphers are always vulnerable to bit flipping, because each bit of plaintext is XORed with a single bit of your stream.

[@roseb2105]

would oscar know the modulas in the linear congruence RNG?

[@lakli4960]

Rosenberg, not Rosental! A married couple who was spying for the Soviets. In the east block countries it was of course denied. in Budapest there was (is) a street, named atfer them: Rosenberg hàzaspàr utca. In German: Rosenberg ehepaar strasse In English: Rosenberg couple street.

[@jungkimin8192]

professor I have one question about LCG we can compute A and B values by A = (s2-s3)(s1-s2)^-1 mod m B = s2 - s1(s2-s3)(s1-s2)^-1 mod m but what if the case where there does not exist a (s1-s2)^-1 in modulo m?

[@pitronetor]

Jung Ki MIN I was wondering exactly the same!

[@ITGuySam]

Hi Professor I'd like to know that if we can get authentication through only nonce in a protocol? for example A------->B: N(a) B-------->A: {N(a),N(b)} K(ab) Do we have mutual authentication ? Thanks

[@introductiontocryptography4223]

Assuming Alice and Bob share the same key that is only known to them, Alice knows after decryption of the message that the message originated from Bob. N(b) is currently not used in your protocol. regards, christof

[@AkshathGrover]

beautifully explained..! thank you sir :)

[@marshalas2]

where do i get homeworks ?(in general is it posible to get them here?

[@nabinpakka8718]

where can i get the homeworks? great lecture by the way

[@introductiontocryptography4223]

Please visit the companion website of our textbook www.cryptotextbook.com and click Online Courses -> Videos. You'll find a comprehensive problem set for each video. The solution to the odd-numbered problems are also on the website. Cheers, christof

[@Kishi1969]

Dear Prof, Please which university are you lecturing at Germany university, Please i want contact you directly on Information Security(Data & Cryptography)

[@harirao12345]

in the very end .... isn't "m" in mod-m unknown as well? so there are 3 variables A, B and m

[@harirao12345]

sorry i see that this was answered below

[@msmosgigi4843]

Hello,sorry but a stupid question but why 8*400??not 400 isnt one key stream bit required for encrypting one bit of the message?? 1:11:37

[@Soficece]

Great lecture! :)

[@raaghavvdevgon3612]

He's soooo good!

[@bibhorkumar2281]

Sir,I m self learning with the help of your videos,can u share the weekly assignment!! Question or anything!!?

[@bibhorkumar2281]

Got it thanks sir❤️😎 👍

[@slaozeren8742]

30:18 I love how he corrects his grammar mistake by himself lol. I just adore him.

[@narutosaga12]

I noticed that too 😌😩🥺

[@roseb2105]

sorry small question how did you get the 8 when you multiply by 400 megabites?

[@introductiontocryptography4223]

I want to convert from megaBYTES to megaBITS. Since there are 8 bits in 1 Byte, I have to multiply by 8 :) regards, christof

[@roseb2105]

Thank you

[@jreamscape]

Preciate it brother

[@riendessus5793]

What are other examples that cellphone as stream ciphers? If anyone of you know, let me know thanks!

[@bablusharma7958]

are lecture notes available online?

[@introductiontocryptography4223]

The lecture closely follows the book (or vice versa :) "Understanding Cryptography". You may want to have a look at the companion website, www.crypto-textbook.com. It is moderately priced and has excellent reviews on Amazon. regards, christof