685 reputation
219
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 5 months
seen Mar 27 at 12:08

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Mar
25
comment Is PBKDF2-HMAC-SHA1 really broken?
Surely it should be a required property? Does it not reduce the potential for brute-forcing alternative passwords?
Mar
25
asked Is PBKDF2-HMAC-SHA1 really broken?
Mar
7
awarded  Popular Question
Mar
5
awarded  Popular Question
Feb
6
awarded  Popular Question
Dec
22
comment With Encrypt-then-MAC, and flexible protocols, do I need to authenticate the authentication?
I recommend that this question is moved to Cryptography SE.
Dec
4
accepted Is a simple stream cipher “partially homomorphic” if no integrity check is applied?
Dec
4
comment Is a simple stream cipher “partially homomorphic” if no integrity check is applied?
This makes sense. I think malleable was the term I was originally trying to think of to describe this property.
Dec
4
comment Is a simple stream cipher “partially homomorphic” if no integrity check is applied?
Does that requirement imply that there are no truly homomorphic symmetric ciphers, since generating the second ciphertext would require knowledge of the key?
Dec
4
asked Is a simple stream cipher “partially homomorphic” if no integrity check is applied?
Nov
23
awarded  Yearling
Nov
17
awarded  Nice Question
Oct
31
asked Cryptanalysis and weaknesses of SEED cipher
Sep
5
awarded  Popular Question
Jul
9
comment Selecting bijective functions for permutations
@CodesInChaos Surely those first operations aren't sufficient? I understand the s-box somewhat, though from my understanding it's a transposition of smaller chunks rather than the entire block.
Jul
9
asked Selecting bijective functions for permutations
Jul
4
accepted Is it worth applying a MAC on data in a HSM?
Jul
4
accepted Potential vulnerability in DH key selection - am I understanding this right?
Jun
6
awarded  Popular Question
May
2
comment Is it worth applying a MAC on data in a HSM?
I'd have gone for EAX mode or GCM immediately if possible, but I'm using a pre-written AES library that doesn't offer such modes, and I've already eaten up half of my program space with libraries without even implementing the storage or request processing code. Adding EAX or GCM would be tricky to get right, and there might not be space. I'll take your advice on the hash, though.