Polynomial

499 reputation

114

bio	website	en.wikipedia.org/wiki/…
	location	United Kingdom
	age	25
visits	member for	1 year, 7 months
	seen	Jun 7 at 8:57
stats	profile views	28

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.

	499 reputation	bio	website	en.wikipedia.org/wiki/…	visits	member for	1 year, 7 months
114 badges		location	United Kingdom		seen	Jun 7 at 8:57

summary answers questions tags badges favorites bounties reputation activity

183 Actions

suggestions reviews revisions comments badges posts accepts all

Mar 26	asked	Is it feasible to break Diffie-Hellman key exchange when the implementation uses a poor-quality PRNG?
Jan 19	accepted	Is it possible to break a hash-based block cipher?
Jan 10	comment	Is it possible to break a hash-based block cipher? @SamuelNeves Perhaps my nomenclature is off a little. However, wouldn't introduction of a CBC-like mode of operation preclude it being a stream cipher? Granted it's not strictly in either category. Regardless, the question stands as-is.
Jan 10	comment	Is it possible to break a hash-based block cipher? @Thomas Hence my choice of CBC.
Jan 10	asked	Is it possible to break a hash-based block cipher?
Jan 6	asked	Simple homomorphic crypto for 32-bit integers
Dec 20	comment	Why is it important that phi(n) is kept a secret, in RSA? This is excellent. Very well done.
Nov 29	comment	What cipher mode is suitable for independantly decryptable short messages? @IlmariKaronen Ah, that makes sense. I was erroneously considering each packet as a block.
Nov 29	comment	What cipher mode is suitable for independantly decryptable short messages? @IlmariKaronen Hmmm, is there a reason why Wikipedia describes CBC as using the previous ciphertext block? I can see that a single unique IV should be used for the conversation (i.e. the full stream of blocks), but not per-block.
Nov 29	comment	What cipher mode is suitable for independantly decryptable short messages? @CodesInChaos I'm aware, though the compressed data is a constant size per packet. I think the packets-vs-time domain is where side channel leaks are likely to occur, which I'll have to research further in order to discover a solution.
Nov 29	comment	What cipher mode is suitable for independantly decryptable short messages? Won't CBC require the previous ciphertext block, therefore making one lost packet destroy the next?
Nov 29	comment	What cipher mode is suitable for independantly decryptable short messages? CTR looks like it could do the job. Yes, integrity will be required. I was thinking of using a MAC, but if you know of a better solution I'm all ears! :)
Nov 28	accepted	Memory-hard operations in work-factor hash functions
Nov 28	accepted	Is it possible to ensure security with zero pre-shared information?
Nov 28	accepted	Blum Blum Shub vs. AES-CTR or other CSPRNGs
Nov 28	asked	What cipher mode is suitable for independantly decryptable short messages?
Nov 23	awarded	Yearling
Nov 6	comment	Attack by replaying messages Assuming, of course, both parties have a way of accurately measuring the time and compensating for geographical differences, daylight savings, leap-seconds, etc.
Nov 6	awarded	Critic
Oct 26	comment	Is this a secure implementation of password reset email? @JeremyW.Sherman The salt is allowed to be public. It's only there to prevent cross-user precomputation attacks such as rainbow tables.