Reputation
7,950
Next tag badge:
63/100 score
25/20 answers
Badges
2 12 42
Impact
~121k people reached

Apr
18
answered Retrieve value of private key after encryption with the public key
Apr
18
comment Prove there is PRG that is not necessarily one-to-one
Probably correct if dropping bits of the input is allowed. I presume it is, but in general you would expect that a random number generator behaves differently for different seed input. Can anybody confirm?
Apr
16
comment What is a Key Derivation Function?
This is probably not a "more formal security definition" of a KDF.
Apr
16
comment What is a Key Derivation Function?
The missing key expansion, the focus on passwords and the fact that it certainly is not formal as requested made me vote down this answer.
Apr
16
comment What is a Key Derivation Function?
@user4982 If you could post an abstract of that text together with your link than it would make an excellent answer.
Apr
16
answered Are keys generated by the user or block cipher algorithms themselves?
Apr
16
comment RSA modulus (N) from public key and calculating N from p, q not equal
Meh, try new BigInteger(1, bp);, same for all other BigInteger calls.
Apr
16
revised Popularity of ECMQV authenticated key agreement protocol
formatting, title change to ECMQV (make more specific), removal of "please answer"
Apr
14
comment RFID Protocol Cryptanalysis
4 bit keys? No countermeasures? What do True or False mean? How is the tag identified? You cannot analyze this scheme without more information.
Apr
13
comment (Simple) Tool for analysing performance (speed in particular) of cryptographic hash function?
So? Insert your own code and make a separate openssl speed mysha256 CLI. Yes, in this case SHA-256 is embarrassingly linear, so you can just test using your own code and a timer. Only disadvantage seems to be that the reporting is missing (but I guess there are plenty tools to handle CSV files with timings).
Apr
13
comment Standards/RFCs for non-Diffie-Hellman perfect forward secrecy?
possible duplicate of What is the post-quantum cryptography alternative to Diffie-Hellman?
Apr
13
comment Standards/RFCs for non-Diffie-Hellman perfect forward secrecy?
ECC-RSA? Elliptic RSA variants? Do you mean algorithms such as ECDSA for signatures or ECIES for encryption? It seems the trick is in the authentication, not so much the key agreement.
Apr
12
comment (Simple) Tool for analysing performance (speed in particular) of cryptographic hash function?
Would have answered the same way on StackOverflow :)
Apr
12
answered (Simple) Tool for analysing performance (speed in particular) of cryptographic hash function?
Apr
11
comment Would a pictographic, phoneme-based, hand cipher be difficult to crack with computer crypt-analysis?
What, in case we have to rise against the machines?
Apr
9
comment Randomness in generation of Virtual Machines from pre-built Image
Well, you can always rely on RDRAND if you are really worried. Just make sure your client OS supports it and that you have got Intel hardware. For instance, this was found for VMWare: "Support for RDRAND was introduced with virtual hardware version 9. As long as your virtual machine has virtual hardware version 9 or greater and RDRAND is available on your physical CPU, it will be available to the guest."
Apr
9
comment BER or DER X9.62 ECDSA signature
The SEC1 document just uses DER as example and specifies only ASN.1 - that's still not very conclusive. DER may be the de facto standard.
Apr
8
comment How does the certificate authority generate a signature F?
When uncertain, look up the standard: "signature is the result of signing the certification request information with the certification request subject's private key" (section 4.2 of RFC 2986, for which the link is strangely broken)
Apr
8
comment BER or DER X9.62 ECDSA signature
I think it is DER, but X9.62 is behind a pay-wall.
Apr
8
asked BER or DER X9.62 ECDSA signature