Reputation
967
Top tag
Next privilege 1,000 Rep.
Edit questions and answers
Badges
4 26
Impact
~27k people reached

1d
comment What is the complexity for attacking 3DES in linear or differential cryptanalysis?
@dave_thompson_085 Fixed the 2^64 error - thanks for spotting that. I left the peta/pebi change out because personally I think it's a bit of a silly distinction, fueled by manufacturers who want to get away with selling smaller drives than what the customer expected from the advertising. But that's a discussion for a different venue ;)
1d
revised What is the complexity for attacking 3DES in linear or differential cryptanalysis?
Fixed 2^64 mistake.
Jul
3
answered What is the complexity for attacking 3DES in linear or differential cryptanalysis?
Jul
3
comment Reasons for components of AES
I quite like the terms "confusion and diffusion". Confusion describes taking some quantum of information (e.g. a byte) and turning it into something else, and diffusion describes taking some information and rearranging it so that the information is randomly spread about.
Jun
5
comment Why does anyone use elliptic curves for a CSPRNG?
@SOJPM AES-CTR was just an example - the point I was trying to make is that there other CSPRNG designs out there that don't have the "magic number" problem. That being said, your "provably secure" comment intrigues me - do you have a reference for a proof? I guess the proof relies upon the discrete log problem being known hard?
Jun
5
asked Why does anyone use elliptic curves for a CSPRNG?
May
8
comment At what point can you you implement crypto algorithms?
@NeilSmithline Also power analysis.
Apr
6
comment What makes this mixer function resistant to differential cryptanalysis?
Makes sense! Do you have a reference that explains the part about invertible vs. non-invertible s-boxes for SPNs? It sounds like an interesting topic.
Apr
6
accepted What makes this mixer function resistant to differential cryptanalysis?
Apr
6
comment What makes this mixer function resistant to differential cryptanalysis?
@MaartenBodewes As I said in the post, I was "testing some other randomly conjured up designs" - this construction was just invented by me trying random things.
Apr
3
answered Is the keystream transmitted with the ciphertext when a stream cipher is used?
Apr
2
answered Are there any valid, and person readable, checksums possible?
Apr
2
comment Are there any valid, and person readable, checksums possible?
I think OP is looking for something similar to the PGP word list.
Apr
2
comment What makes this mixer function resistant to differential cryptanalysis?
@Aleph Sorry, I'm not familiar with the term DDT. The s-box is just a randomly generated preset created by shuffling the numbers 0 to 255 - is it likely that this produced a good S-box in terms of differential properties?
Apr
2
comment What makes this mixer function resistant to differential cryptanalysis?
@kodlu 2, on an 8-bit input. Sorry, should've said.
Apr
1
answered Decrypt AES-encrypted data with another key
Apr
1
asked What makes this mixer function resistant to differential cryptanalysis?
Mar
16
comment Given only RSA public key parameters, what security issues might I be able to detect?
@yyyyyyy I was wondering whether somebody might mention shared factors and other such things. I don't know of any that have affected .NET compilers / IDEs, but I'd be interested to know if anyone has heard of such a thing (either in Microsoft .NET, Mono, or another implementation).
Mar
16
comment Can the same random number be used in encryption and signing?
Another reason is that if the implementation of the signature function is flawed (either in terms of the cryptography involved, or a side-channel attack) in a way that allows key recovery, the attacker would gain the ability to decrypt all messages because she inherently recovers the encryption key too. Where the two keys are distinct, she only gains the ability to forge messages (which may or may not be useful, depending on ciphertext malleability).
Mar
16
comment Where I can find a list of certified software / hardware RNGs compliant to NIST SP 800-22?
I would imagine that you'd need to get your implementation certified, in situ within your product.