Reputation
7,373
Next tag badge:
61/100 score
23/20 answers
Badges
2 11 42
Newest
 Enlightened
Impact
~110k people reached

Apr
13
comment What are the difference between cryptographic primitives and encryption primitives?
@StephenTouset I think that's an answer.
Apr
13
comment (Simple) Tool for analysing performance (speed in particular) of cryptographic hash function?
So? Insert your own code and make a separate openssl speed mysha256 CLI. Yes, in this case SHA-256 is embarrassingly linear, so you can just test using your own code and a timer. Only disadvantage seems to be that the reporting is missing (but I guess there are plenty tools to handle CSV files with timings).
Apr
13
comment Standards/RFCs for non-Diffie-Hellman perfect forward secrecy?
possible duplicate of What is the post-quantum cryptography alternative to Diffie-Hellman?
Apr
13
comment Standards/RFCs for non-Diffie-Hellman perfect forward secrecy?
ECC-RSA? Elliptic RSA variants? Do you mean algorithms such as ECDSA for signatures or ECIES for encryption? It seems the trick is in the authentication, not so much the key agreement.
Apr
12
comment (Simple) Tool for analysing performance (speed in particular) of cryptographic hash function?
Would have answered the same way on StackOverflow :)
Apr
12
answered (Simple) Tool for analysing performance (speed in particular) of cryptographic hash function?
Apr
11
comment Would a pictographic, phoneme-based, hand cipher be difficult to crack with computer crypt-analysis?
What, in case we have to rise against the machines?
Apr
9
comment Randomness in generation of Virtual Machines from pre-built Image
Well, you can always rely on RDRAND if you are really worried. Just make sure your client OS supports it and that you have got Intel hardware. For instance, this was found for VMWare: "Support for RDRAND was introduced with virtual hardware version 9. As long as your virtual machine has virtual hardware version 9 or greater and RDRAND is available on your physical CPU, it will be available to the guest."
Apr
9
comment BER or DER X9.62 ECDSA signature
The SEC1 document just uses DER as example and specifies only ASN.1 - that's still not very conclusive. DER may be the de facto standard.
Apr
8
comment How does the certificate authority generate a signature F?
When uncertain, look up the standard: "signature is the result of signing the certification request information with the certification request subject's private key" (section 4.2 of RFC 2986, for which the link is strangely broken)
Apr
8
comment BER or DER X9.62 ECDSA signature
I think it is DER, but X9.62 is behind a pay-wall.
Apr
8
asked BER or DER X9.62 ECDSA signature
Apr
8
comment How does the certificate authority generate a signature F?
Note also that the hash is not directly over the bytes before the signature. The data that needs to be signed is first singled out and - if the CA software was written correctly - canonicalized. For some of the pitfalls, you can read the aging but brilliant X509 style guide.
Apr
8
comment How does the certificate authority generate a signature F?
I think the "challenge-response test or something" in step 4 is usually the validation and verification of the CSR. CSR's are signed by the private key generated by the user. Unless you've got a crap CA like DigiNotar that makes it "easy" and performs the private key generation for you of course (sigh).
Apr
8
answered Should I use ECB or CBC encryption mode for my block cipher?
Apr
7
comment Why would an Initialization Vector be supplied externally?
@StephenTouset Agreed and important enough to integrate into the answer, thanks for the additional argument!
Apr
7
revised Why would an Initialization Vector be supplied externally?
added 191 characters in body
Apr
7
comment New to cryptology, studying Message Authentication Codes
@poncho Maybe officially that's the case, but I often see the use of just MAC for MAC algorithms based on a block cipher (CBC-MAC or CMAC) - possibly because there doesn't seem to be a good alternative. HMAC is also a description of a specific algorithm on the other hand - oh well, it's language, not exact science.
Apr
7
comment AES GCM calculator
Don't trust online tools with regards to crypto. Even if they are not outright incorrect, they often make undocumented assumptions (e.g. the character encoding on the site you are pointing to). Richie is right, although I would have pointed to the CAVP test vectors
Apr
7
comment New to cryptology, studying Message Authentication Codes
Integrity and authenticity is often implied if the other property is achieved. I would however keep a strict distinction between the two properties as they do mean different things.