Reputation
8,971
Next tag badge:
69/100 score
29/20 answers
Badges
3 13 45
Impact
~137k people reached

8h
comment What is SRP-Z form?
From the terms I understand that this is mutual authentication while SRP itself is client only authentication. If you mix in a server secret in the session key derivation then the above description may make sense. Did you search the patent database for SRP?
21h
comment Collision attacks on digital signatures
I think the text in the question shows a clear underestimation about how easy it is to include a "jumbled mess" inside a file. I created a shell script that simply put the jumbled mess behind the executable code. Same MD5, script performed two entirely different things.
21h
comment Source for PKCS#11 Header Files
Don't see them either. If in doubt, kindly ask the authors.
1d
comment Ring signatures in ECC
@geoff_h That didn't work but you can always create your own answer. You won't get any points accepting it, but if you respond to this comment then I would be happy to upvote (if it is good, of course). A belated welcome to crypto, these are exactly the questions we are waiting for.
2d
revised Do all attacks against PKCS1 v1.5 encryption require an oracle
oops.. 8 bytes not zero is slightly less than 64 bits not 128 bits
2d
awarded  Good Question
2d
revised HMAC-SHA1( secret key ) with header of a transmitted file
added 12 characters in body
2d
comment HMAC-SHA1( secret key ) with header of a transmitted file
Please note my question here though.
2d
answered HMAC-SHA1( secret key ) with header of a transmitted file
Jun
28
comment Do all attacks against PKCS1 v1.5 encryption require an oracle
To be very precise that would be RSAES-PKCS1-v1_5 that uses EME-PKCS1-v1_5 encoding, according to PKCS#1 v2.1 specifications. Not used much, but it doesn't leave any doubts to what scheme is being used.
Jun
28
comment Can I use HKDF to improve security of HMAC used with weak hash function?
Sometimes you have to fiddle if the solution space is otherwise empty. But if you can leave it to experts such as DJ Bernstein -> NaCl then all the better. If you keep using HMAC then don't forget to include the IV.
Jun
28
comment RSA Signature Forgery
There is a reason why even the authors of PKCS#1 went out of their way to create a different name for modular exponentiation as used for signature generation and encryption. "I named it as an encryption" is the same as saying "I think I know better than the authors or RSA on how to define the terms". Please stop the confusion.
Jun
28
answered Can I use HKDF to improve security of HMAC used with weak hash function?
Jun
28
comment Accelerated hashing on consumer-grade CPU?
@RichieFrame Almost no consumer CPU supports hardware accelerated hash instruction, as the VIA Eden processors do. They are however not known particularly for speed, so the mileage may vary.
Jun
28
comment Getting the encryption/has algorithm used for modem configuration file
Thanks for reporting back. This seems more a modem specific hack than an answer to the question though.
Jun
28
revised Block Ciphers - Standardize plain text
deleted 2 characters in body
Jun
28
revised Do all attacks against PKCS1 v1.5 encryption require an oracle
added 19 characters in body
Jun
28
comment Block Ciphers - Standardize plain text
@RickyDemer PKCS#7 padding seems to be the industry default (I like bit padding better too). Please post an answer instead of putting an answer in a comment like this.
Jun
28
answered Block Ciphers - Standardize plain text
Jun
28
answered Do all attacks against PKCS1 v1.5 encryption require an oracle