773 reputation
222
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 8 months
seen Jul 25 at 16:34

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


May
23
comment What is the time complexity of the RC4 encryption & decryption algorithms?
Most block ciphers will be O(n) against the number of blocks, yes.
May
23
asked Hash decrypts key, key decrypts cipher… why?
May
23
answered What is the time complexity of the RC4 encryption & decryption algorithms?
May
23
comment Order of cascaded ciphers
@PaŭloEbermann This is purely theoretical, so I'd be interested in the security implications of both.
May
23
comment Order of cascaded ciphers
Interesting. So the optimal solution is to place the two strongest ciphers on the outside? i.e. first and last.
May
22
revised Order of cascaded ciphers
added 69 characters in body
May
21
accepted Security of simple xor and s-box cipher?
May
21
awarded  Scholar
May
21
accepted Is a book cipher provably secure?
May
21
accepted Desirable S-box properties
May
21
asked Order of cascaded ciphers
May
2
awarded  Teacher
May
1
answered Practical necessity of semantic security under chosen plain text attack (CPA) in CBC mode
Nov
24
comment Is a book cipher provably secure?
Interesting. Given an attacker with moderate resources (i.e. one that doesn't have access to the entire world's literature) it seems that it would be secure as long as the pages, lines and letter offsets were chosen with reasonably random distribution.
Nov
24
comment Is a RSA-signature of some identifying data a safe way to implement a license key?
@MichaelKjörling - I misunderstood the intent of your response. The product ID is designed to identify the use of a particular license on a particular machine. A fresh re-install on the same machine with the same key and exact same hardware will not produce the same ID, because it's considered a separate install of that license. On a mass license, however, the product ID will be the same regardless of the hardware it runs on. Using the product ID of the OS as a basis for any security mechanism is flawed at best.
Nov
24
revised Is a book cipher provably secure?
edited title
Nov
24
revised Is a book cipher provably secure?
typo
Nov
24
asked Is a book cipher provably secure?
Nov
24
comment Is HTTPS secure if someone snoops the initial handshake?
Just keep in mind that tools like sslstrip can be used to perform a man-in-the-middle attack. The user will see a standard http:// page instead of a https:// page. This isn't due to any vulnerability in the crypto, it's just a problem with how the HTTP protocol works. HTTP Strict Transport Security seems to be a patch for this though: tools.ietf.org/html/draft-ietf-websec-strict-transport-sec-03
Nov
24
comment Security of simple xor and s-box cipher?
Hmm, do we compute each $S[x]$ for $x$ on the fly, using some function $f$, rather than "caching" the entire $S$ field in an array somewhere?