Reputation
9,624
Next tag badge:
77/100 score
31/20 answers
Badges
3 13 45
Impact
~148k people reached

2d
answered What is the advantage of AEAD ciphers?
2d
comment Understanding elliptic curve encryption
I'm voting to close this question as off-topic because this was about a simple misunderstanding about modular arithmetic.
Jul
29
comment Why calculate pi to estimate randomness?
@tylo fgrieu's answer seems new as well. I'm not sure which one came first, but this information certainly seems to be in the second paragraph of the answer of fgrieu, which would make this answer redundant.
Jul
26
comment Is there a signature scheme for the Cramer-Shoup cryptosystem?
@Sebi Trust me if I say that it is the same on SO. Not so much here. But you do have to give people some time. Last time I asked a question - not something that occurs often - I was asked out to dinner right after... Anyway, welcome to crypto :)
Jul
26
revised Is there a signature scheme for the Cramer-Shoup cryptosystem?
mainly formatting, clarifying question
Jul
26
comment Is there a signature scheme for the Cramer-Shoup cryptosystem?
@Sebi Easy there, cowboy. It's OK to ask for accepting an answer after a day or so, if there is no peep from the poster in the mean time.
Jul
23
comment What are the implications of a birthday attack on a HMAC?
@otus Changed my mind on it. Would you agree with the current definition?
Jul
23
revised What are the implications of a birthday attack on a HMAC?
added 66 characters in body
Jul
23
comment What are the implications of a birthday attack on a HMAC?
@mikeazo I'm not sure if it is only true for Merkle-Damgård hash functions, but some kind of linearity in the way the input is treated seems required.
Jul
23
revised What are the implications of a birthday attack on a HMAC?
added 66 characters in body
Jul
23
revised Why should $a,b < N$ for Montgomery Reduction?
added 1 character in body; edited title
Jul
23
revised Execution speed of AES_128 GMAC operation
added 30 characters in body
Jul
23
answered Execution speed of AES_128 GMAC operation
Jul
23
revised What are the implications of a birthday attack on a HMAC?
added 26 characters in body
Jul
23
comment What are the implications of a birthday attack on a HMAC?
It's probably true for most hash functions, especially if they are linear in nature, but it would be possible to construct one that isn't.
Jul
23
revised What are the implications of a birthday attack on a HMAC?
added 214 characters in body
Jul
23
answered What are the implications of a birthday attack on a HMAC?
Jul
23
comment How can I read the AE figures?
So personally I would go for something like $C_1 = E_{k,1}(M_1 \oplus C_0)$
Jul
23
comment How can I read the AE figures?
I think the tweak (e.g. just a counter) is already supposed to be in there, otherwise scheme 2 would violate CPA (if $M_1 = M_3$ it would clearly show up as $C_1 = C_3$, and authentication would be vulnerable for similar reasons).
Jul
23
comment TRNG vs PRNG - Entropy?
@BufferOverflow The same kind of trick could of course be used for a TRNG. Do you know if the TRNG in Intel chips can be trusted? It's not using Dual ECC but how are you going to prove the source trustworthy?