Reputation
2,127
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
8 25
Newest
 Talkative
Impact
~35k people reached

Jan
6
comment Hash function that allows to decide if A > B if you only have hash(A) and hash(B)?
Is this the multilinear maps one or the one that just uses PRFs? Would you be willing to send me the source @ThomasM.DuBuisson ?
Jan
6
awarded  Talkative
Jan
5
comment Is secure lattice based cryptography in future?
The hardness of lattice cryptography is NOT reducible to an NP-hard problem. Worst-case lattice assumptions are usually similar to the NP-hard version of the problem, except with a larger approximation factor.
Jan
3
comment Is signing a plaintext sufficient?
You don't need to hash - typically hashes are used to implement the random oracle used in the proof of security of a signature scheme, but there exist signature schemes that don't use random oracles.
Jan
3
awarded  Citizen Patrol
Dec
21
comment Secure, patent-free alternative to NTRU
Also it should be mentioned that if you want something NTRU-like but with a proven reduction to a worst-case lattice problem you might want to look at eprint.iacr.org/2013/004.
Dec
20
comment Secure, patent-free alternative to NTRU
OP: When Chris Peikert gives you advice on lattice cryptosystems, you take it.
Dec
18
comment Using HMAC as a nonce with AES-CTR encrypt-and-MAC
Ummmm.... Probably, as long as Poly1305 doesn't have some weird property that I'm not aware of. You just need to make sure your MAC is also a PRF in your adversarial setting.
Dec
8
comment Applying Vigenere on small strings with sorting capability
What is OPS? Do you mean OPE?
Dec
2
awarded  Nice Answer
Dec
1
reviewed Approve Signature schemes for underpowered devices (8bit microcontroller)
Dec
1
comment RSA & DH at risk due to math advances, will this eventually affect elliptic curves too?
Both of them use discrete log, but in different groups with very, very different algebraic properties. It's like saying a car is quite similar to a fighter jet because they both use fossil fuels.
Nov
30
comment Are there comprehensive alternatives to RSA?
I got curious too - check section 2.3.5: cseweb.ucsd.edu/~mihir/papers/gb.pdf
Nov
30
comment Are there comprehensive alternatives to RSA?
raw Rabin isn't, since the squaring map in Z/NZ is four-to-one.
Nov
30
comment Are there comprehensive alternatives to RSA?
RSA is the only known trapdoor permutation, so in that sense there isn't a comprehensive alternative.
Nov
30
awarded  Enlightened
Nov
30
awarded  Nice Answer
Nov
30
answered RSA & DH at risk due to math advances, will this eventually affect elliptic curves too?
Nov
29
answered Using HMAC as a nonce with AES-CTR encrypt-and-MAC
Nov
20
comment How does hacking work exactly?
Not exactly on topic, as this site is focused on cryptography specifically. The "Information Security" site would be able to answer this question better, I think.