217 reputation
6
bio website
location New York, NY
age 46
visits member for 5 months
seen yesterday

1d
comment CVE-2014-1295 (Apple's Secure Transport and Triple Handshake Attack)
Oh, OK. I thought I read about that some time ago. I guess the attack is more recent than I first thought...
1d
accepted CVE-2014-1295 (Apple's Secure Transport and Triple Handshake Attack)
2d
asked CVE-2014-1295 (Apple's Secure Transport and Triple Handshake Attack)
2d
accepted “Fine grain Cross-VM Attacks on Xen and VMware are possible” and OpenSSL 0.9.7
2d
asked “Fine grain Cross-VM Attacks on Xen and VMware are possible” and OpenSSL 0.9.7
Apr
17
comment AES-SIV security
"...robustness against nonce-reuse is that SIV is a non-online 2-pass mode" - Single pass authenticated encryption is patented in the US and other parts of the world. Two-pass is a must to avoid the minefield. Is two-pass really required for defense against nonce-reuse?
Jan
28
comment How is CipherCloud doing homomorphic encryption?
@CodesInChaos - "The letter, has two parts... [the second] is about the false, misleading and defaming statements" - also see FIPS 140-2 Validation, In-Process Module, and Coordination Stage.
Jan
28
answered How is CipherCloud doing homomorphic encryption?
Jan
17
revised Diffie-Hellman Parameter Check (when g = 2, must p mod 24 == 11?)
Added file reference.
Jan
16
accepted Ephemeral Diffie-Hellman generator selection
Jan
16
comment Diffie-Hellman Parameter Check (when g = 2, must p mod 24 == 11?)
Very nice, poncho.
Jan
16
accepted Diffie-Hellman Parameter Check (when g = 2, must p mod 24 == 11?)
Jan
16
revised Diffie-Hellman Parameter Check (when g = 2, must p mod 24 == 11?)
Generator -> Parameter
Jan
16
asked Diffie-Hellman Parameter Check (when g = 2, must p mod 24 == 11?)
Jan
16
comment Ephemeral Diffie-Hellman generator selection
CodesInChaos and DrLecter - there are two choices: (1) NIST/IETF group, and (2) user supplied group. If (2) is chosen but no group provided, it is generated on the fly.
Jan
15
asked Ephemeral Diffie-Hellman generator selection
Dec
26
awarded  Suffrage
Dec
26
answered EC equivalent for RSA-OAEP
Dec
26
comment Why is elliptic curve cryptography not widely used, compared to RSA?
Blackberry and Certicom claim over 300 patents in the arena, IIRC. See, for example, the NSA Sublicense FAQ at The National Security Agency’s ECC License Agreement with Certicom Corp. Certicom and Blackberry also claim to have patents that cover what CAs need to issue certificates with elliptic curves (perhaps implementation related?). See, for example, Certicom's IPR Licensing Contributions to the IETF's IKE, SSL, TLS, CMS, and S/MIME.
Dec
26
comment How does DJB's nistp224 manage to fit compressed points into 224 bits?
"I find the source code utterly unenlightening" - Haha! I'd really like to vote that up two or three more times. How do you like the documentation and custom build system.....