208 reputation
6
bio website
location New York, NY
age 46
visits member for 5 months
seen 20 hours ago

1d
comment AES-SIV security
"...robustness against nonce-reuse is that SIV is a non-online 2-pass mode" - Single pass authenticated encryption is patented in the US and other parts of the world. Two-pass is a must to avoid the minefield. Is two-pass really required for defense against nonce-reuse?
Jan
28
comment How is CipherCloud doing homomorphic encryption?
@CodesInChaos - "The letter, has two parts... [the second] is about the false, misleading and defaming statements" - also see FIPS 140-2 Validation, In-Process Module, and Coordination Stage.
Jan
28
answered How is CipherCloud doing homomorphic encryption?
Jan
17
revised Diffie-Hellman Parameter Check (when g = 2, must p mod 24 == 11?)
Added file reference.
Jan
16
accepted Ephemeral Diffie-Hellman generator selection
Jan
16
comment Diffie-Hellman Parameter Check (when g = 2, must p mod 24 == 11?)
Very nice, poncho.
Jan
16
accepted Diffie-Hellman Parameter Check (when g = 2, must p mod 24 == 11?)
Jan
16
revised Diffie-Hellman Parameter Check (when g = 2, must p mod 24 == 11?)
Generator -> Parameter
Jan
16
asked Diffie-Hellman Parameter Check (when g = 2, must p mod 24 == 11?)
Jan
16
comment Ephemeral Diffie-Hellman generator selection
CodesInChaos and DrLecter - there are two choices: (1) NIST/IETF group, and (2) user supplied group. If (2) is chosen but no group provided, it is generated on the fly.
Jan
15
asked Ephemeral Diffie-Hellman generator selection
Dec
26
awarded  Suffrage
Dec
26
answered EC equivalent for RSA-OAEP
Dec
26
comment Why is elliptic curve cryptography not widely used, compared to RSA?
Blackberry and Certicom claim over 300 patents in the arena, IIRC. See, for example, the NSA Sublicense FAQ at The National Security Agency’s ECC License Agreement with Certicom Corp. Certicom and Blackberry also claim to have patents that cover what CAs need to issue certificates with elliptic curves (perhaps implementation related?). See, for example, Certicom's IPR Licensing Contributions to the IETF's IKE, SSL, TLS, CMS, and S/MIME.
Dec
26
comment How does DJB's nistp224 manage to fit compressed points into 224 bits?
"I find the source code utterly unenlightening" - Haha! I'd really like to vote that up two or three more times. How do you like the documentation and custom build system.....
Dec
26
revised Security Level Estimate when Cascading/Compositing Ciphers?
Added "using tradition crypto primitives while maintaining security levels and avoiding elliptic curves..."
Dec
26
comment Security Level Estimate when Cascading/Compositing Ciphers?
Thanks again D.W. "This provides only 128-129 bits of security, but not for the reasons you expected ..." - that's actually what I expected, but wanted to make sure I was not missing something obvious.
Dec
26
accepted Security Level Estimate when Cascading/Compositing Ciphers?
Dec
26
comment Explaining weakness of Dual EC DRBG to wider audience?
"... you could explain that at least one major crypto library (RSA's BSAFE) does use it, for reasons that are unclear..." - there's actually $10,000,000 reasons. See Secret contract tied NSA and security industry pioneer.
Dec
26
awarded  Commentator