Reputation
424
Top tag
Next privilege 500 Rep.
Cast close & reopen votes
Badges
1 12
Newest
 Critic
Impact
~16k people reached

Jul
26
comment Blinding to mask private key operations
Thanks SEJPM. That's a good point about other problems (in particular, the DH problem rather than FF problem).
Jul
24
asked Blinding to mask private key operations
Jul
20
revised Favor hash size or field size when systems are disparate?
Added additional information.
Jul
20
asked Favor hash size or field size when systems are disparate?
Jul
9
comment Software interface for KDF and PBKDF?
@Maarten - I just noticed I've been mispelling your name. Please accept my apologies.
Jul
9
comment Software interface for KDF and PBKDF?
Thanks Otus, Maarten and others. We decided on a simpler interface, where the particular's scheme's parameters are passed in through another object (KeyDerivationParams class).
Jul
9
accepted Software interface for KDF and PBKDF?
Jul
9
revised Diffie-Hellman Parameter Check (when g = 2, must p mod 24 == 11?)
Crypto.SE Formatting.
Jul
7
comment Software interface for KDF and PBKDF?
Thanks Marteen. I think its quickly converging on a Parameters class. My next step was precisely what you called out - take a look at Java's architecture, and see what they do.
Jul
6
comment Software interface for KDF and PBKDF?
"... opaque return value that can be passed as the only additional parameter into a verification routine..." - OK, this is interesting. One of the ideas I have been contemplating is a base class of KeyDerivationFunctionParameters, and each KDF can define their own requirements. That even tidies up KDFs like Scrypt, and provides the future extensibility I hope to achieve. I've resisted it because I was trying to keep changes to a minimum, and I did not want to add five or six new C++ classes.
Jul
6
comment Software interface for KDF and PBKDF?
"... I don't think a salt should ever be left out, so I don't see why it should be optional..." - OK, I have to be careful here. First, it could reduce to me just bike shedding. Second, some standards have already made that call.
Jul
6
comment Software interface for KDF and PBKDF?
@Maarten - yes, thanks. I was referring to the application of the derivation function. For example, IKEv2 uses a KDF because the result of the Diffie-Hellman exchange is not uniformly distributed (so the shared secret cannot be used directly as cryptographic keys).
Jul
6
asked Software interface for KDF and PBKDF?
Jul
3
awarded  Critic
Jul
3
comment Wrong Test Vector for HKDF with HMAC-SHA256
The HMAC algorithm appears to digest the over-sized key just fine.
Jun
15
accepted Blinding value of particular form
Jun
14
comment Blinding value of particular form
Does it need to be $(\frac{r}{p})=1$, or can it be $(\frac{r}{p}) != -1$?
Jun
10
asked Blinding value of particular form
Jun
10
comment Why does P1363 require RW signature with $0 ≤ s < n/2$?
Thanks @fgrieu. This is going to take me some time to digest (sans the answer in bold text).
Jun
10
accepted Why does P1363 require RW signature with $0 ≤ s < n/2$?