Reputation
9,130
Next tag badge:
74/100 score
30/20 answers
Badges
3 13 45
Impact
~139k people reached

Jun
6
revised Is it OK to use a hash of the key as nonce for AES GCM?
GPM -> gcm
Jun
6
comment Is it OK to use a hash of the key as nonce for AES GCM?
Please also amend the question next time if it is found in error.
Jun
6
comment computational complexity class of decryption of AES
@SOJPM Agreed, but that cannot be concluded from the question itself, it can only be inferred from the second comment of this question. It should not be required to read through all the comments to understand the question.
Jun
6
revised Defining format-preserving encryption for natural language
added 10 characters in body; edited title
Jun
6
comment computational complexity class of decryption of AES
We now have an answer for this question, but it does focus on the modes of operation for block ciphers instead of the block cipher itself. Please indicate in your question which one of the two is meant.
Jun
6
comment Will non-ECC algorithms like RSA eventually become too inefficient?
Inefficient implicitly indicates that the algorithm is used in a certain situation. If you say that the algorithm itself is inefficient then - in my opinion - you are suggesting that it could not be used anymore in any situation. This is reflected by the given answer and my comment. For embedded devices and smart card you could argue that RSA private key operations, RSA key pair generation and RSA signature size are already major issues.
Jun
6
comment SHA-256 hash of null input?
sha256sum - press ^D - presto.
Jun
6
comment Will non-ECC algorithms like RSA eventually become too inefficient?
I agree with SOJPM here. Impractical would mean that it is not usable at all anymore. Anybody that has tried to generate a 15K key pair will probably agree that this is a process that is currently too painful compared to ECC. It however is also so far out of reach with regards to factoring $p$ & $q$ that it currently isn't necessary at all.
Jun
6
revised Will non-ECC algorithms like RSA eventually become too inefficient?
added 66 characters in body
Jun
5
answered Key exchange using ECDH vs ECIES
Jun
5
comment Distinguishing attack on stream cipher created from a block cipher in counter mode
I'm more worried that your answer is virtually identical to mine. If you want to answer your own question then you can do this by submitting them both at the same time.
Jun
5
comment Distinguishing attack on stream cipher created from a block cipher in counter mode
Beware that there are multiple ways of treating the IV for CTR mode. Many implementations use the entire block size as counter. In other words, IV right padded with zeros may be the starting value of $i$. Oh, and welcome Chris :)
Jun
5
answered Distinguishing attack on stream cipher created from a block cipher in counter mode
Jun
5
comment Distinguishing attack on stream cipher created from a block cipher in counter mode
Usually we don't allow substantial changes to questions, but in this case CTR mode was meant according to title, so I guess we should allow it in this case. Note that the comment above was for a previous version of the question.
Jun
5
revised Distinguishing attack on stream cipher created from a block cipher in counter mode
grammar
Jun
4
comment Are there security issues with adding plaintext length to TLS packets?
I don't get it. If you use GCM mode you can already determine the plaintext length, unless I am entirely mistaken about that. There is no padding and a tag size that should be known. So there should be no need to add bytes to the encrypted packets.
Jun
4
comment Trying to understand the use of ECC in TLS certificates
I expected as much when you said F256 and with a and b not according to specs, but I wasn't 100% on it. Glad you got what you need :)
Jun
4
answered Are there security issues with adding plaintext length to TLS packets?
Jun
4
comment Trying to understand the use of ECC in TLS certificates
The parameters are fixed. I'll check the curve when I get home. I only have the uncompressed version on screen. I get invalid point compression when I try to decompress g. You should use {} around e.g. 256 in above equation: $2^{256}$
Jun
4
comment Trying to understand the use of ECC in TLS certificates
The value of the private key (a vector of 256 bits) and public key (a single point on the curve) will of course be generated by the owner. The other parameters are set if you use a well specified curve.