Why won't anyone give me money for my cryptographic signature mitigation?

1 slowdoorsemillc 2 8/6/2025, 10:55:29 PM
https://github.com/SlowdoorSemiconductorLLC/CryptographicSignatureMitigationIdea

https://www.reddit.com/r/cryptography/s/rp9OUHLjiq

Cryptographic Signature Verification Mitigation Idea by checking padding after decryption.

The idea is to add 2048 bits (more or fewer could be added or removed) to the beginning of a file. All 2048 of those bits are 0's. Then, encrypt the file with a private key. When decrypted with the right public key, all of the first 2048 bits are 0's, as well as the rest of the plaintext being decrypted properly. If decrypting using the wrong public key or decrypting with public key A the plaintext data that has been encrypted with a private key that doesn't produce public key A, there is a 1 in 2^2048 chance of the first 2048 bits being all 0's. This is a solution to hash collisions.

I dedicate this idea to the Public Domain.

Why can't I be hired by Intel to add to their Boot Guard?

My GoFundMe for my FPGA Architecture was taken down by GoFundMe (or the State).

I am denied my billionaire future.

Comments (2)

zzo38computer · 16m ago
Known-plaintext attack might be possible then, although there are ways to mitigate that.
slowdoorsemillc · 7m ago
Current signature verification: Calculate hash of known operating system image, decrypt digital signature with public key (known because it's public) which is a hash encrypted with private key, compare calculated hash with decrypted hash, boot if equal.

That's like saying "I know the hash value encrypted and decrypted so I can deduce the private key."

If the current signature verification algorithms aren't subject to known plaintext attacks (but are to hash collision attacks) then my algorithm isn't subject to known plaintext attacks and isn't subject to hash collisions.

The only thing hidden in current signature verification is the private key (intended for signing) and my idea for a mitigation also keeps the private key private (intended for signing.)