Reputation
1,056
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
6 9
Newest
 Yearling
Impact
~26k people reached

  • 0 posts edited
  • 0 helpful flags
  • 13 votes cast
Sep
6
comment How can we reason about the cryptographic capabilities of code-breaking agencies like the NSA or GCHQ?
Don't focus too much on specific organizations, such as the American National Security Agency (NSA). Maybe you think NSA are The Good Guys and will not do anything bad (even if they have such an ability) or you at least think they are on your side and will not do anything bad to you. But do we have any reason to believe that the Chinese or Russian classified cryptography research are less advanced than the American or British? Also some users (e.g. Europeans) may not feel okay about the possibility of NSA having such power over their communications.
Sep
1
comment How can we reason about the cryptographic capabilities of code-breaking agencies like the NSA or GCHQ?
Yes, this is a good question. Everyone should have this question. The fact that nobody has a good answer is an important fact and it is good to publish the question on this site. A lot of the most important questions around don't really have solid answers. Uncertainty and ignorance are what we have to face up to and decide how to manage.
Sep
1
comment What is the post-quantum cryptography alternative to Diffie-Hellman?
Not for the key agreement that you asked for, but for digital signatures, please see my answer to a previous related question.
Aug
17
answered Are these emerging threats against AES affecting your designs?
Aug
6
answered UMAC: to what extent is it in use today?
Aug
4
answered Guarding against cryptanalytic breakthroughs: combining multiple hash functions
Aug
3
answered Reduction from signatures to encryption?
Aug
2
awarded  Beta
Jul
17
revised Is key size the only barrier to the adoption of the McEliece cryptosystem, or is it considered broken/potentially vulnerable?
added 247 characters in body
Jul
17
answered Is key size the only barrier to the adoption of the McEliece cryptosystem, or is it considered broken/potentially vulnerable?
Jul
17
awarded  Editor
Jul
17
revised Is it feasible to build a stream cipher from a cryptographic hash function?
added 180 characters in body
Jul
17
awarded  Teacher
Jul
17
answered Is it feasible to build a stream cipher from a cryptographic hash function?
Jul
17
answered Reduction from signatures to encryption?
Jul
13
awarded  Precognitive
Jul
13
awarded  Supporter