830 reputation
426
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 4 months
seen Mar 20 at 10:34

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Mar
16
comment Given only RSA public key parameters, what security issues might I be able to detect?
@yyyyyyy I was wondering whether somebody might mention shared factors and other such things. I don't know of any that have affected .NET compilers / IDEs, but I'd be interested to know if anyone has heard of such a thing (either in Microsoft .NET, Mono, or another implementation).
Mar
16
comment Can the same random number be used in encryption and signing?
Another reason is that if the implementation of the signature function is flawed (either in terms of the cryptography involved, or a side-channel attack) in a way that allows key recovery, the attacker would gain the ability to decrypt all messages because she inherently recovers the encryption key too. Where the two keys are distinct, she only gains the ability to forge messages (which may or may not be useful, depending on ciphertext malleability).
Mar
16
comment Where I can find a list of certified software / hardware RNGs compliant to NIST SP 800-22?
I would imagine that you'd need to get your implementation certified, in situ within your product.
Mar
16
asked Given only RSA public key parameters, what security issues might I be able to detect?
Mar
16
comment What is the most light-weight symmetric cipher thats still usefull?
What are your actual limitations? The answer(s) to your question greatly depend on your platform, and how limited your ROM and RAM are.
Mar
16
comment Where I can find a list of certified software / hardware RNGs compliant to NIST SP 800-22?
According to this page, NIST certifies four DRBG techniques, and no NRBGs. It doesn't seem that they've explicitly certified any implementation.
Mar
16
comment CCA-attack is possible in RSA, but how the decryption key $d$ is known to anyone
Are you talking about Bleichenbacher's ACCA attack? My understanding is that it's a padding oracle attack against PKCS#1, which inherently affects RSA, rather than an attack against RSA itself.
Feb
19
awarded  Nice Question
Feb
6
awarded  Popular Question
Jan
9
accepted Discrepancy with reported key size for EDE ciphers in Qualys SSL Labs
Jan
9
revised Discrepancy with reported key size for EDE ciphers in Qualys SSL Labs
added 107 characters in body
Jan
9
asked Discrepancy with reported key size for EDE ciphers in Qualys SSL Labs
Dec
27
awarded  Notable Question
Nov
23
awarded  Yearling
Sep
30
awarded  Explainer
Sep
2
awarded  Popular Question
Jul
16
comment Can I crack an AES string if I have all these parameters?
@Matthew ... and verify that the result is correct by doing statistical analysis. Remember that AES decryption with incorrect keys just gets you a bunch of incorrect plaintext bytes.
Jul
15
comment Galois field step in XEX mode
Surely $2^n$ over $GF(2^{128})$ is equal to $2^n\ mod\ 2^{128}$?
Jul
15
comment Galois field step in XEX mode
@mikeazo If you look, that question you linked was asked by me.
Jul
14
asked Galois field step in XEX mode