Reputation
9,011
Next tag badge:
73/100 score
30/20 answers
Badges
3 13 45
Impact
~137k people reached

Jun
28
comment Can I use HKDF to improve security of HMAC used with weak hash function?
Sometimes you have to fiddle if the solution space is otherwise empty. But if you can leave it to experts such as DJ Bernstein -> NaCl then all the better. If you keep using HMAC then don't forget to include the IV.
Jun
28
comment RSA Signature Forgery
There is a reason why even the authors of PKCS#1 went out of their way to create a different name for modular exponentiation as used for signature generation and encryption. "I named it as an encryption" is the same as saying "I think I know better than the authors or RSA on how to define the terms". Please stop the confusion.
Jun
28
answered Can I use HKDF to improve security of HMAC used with weak hash function?
Jun
28
comment Accelerated hashing on consumer-grade CPU?
@RichieFrame Almost no consumer CPU supports hardware accelerated hash instruction, as the VIA Eden processors do. They are however not known particularly for speed, so the mileage may vary.
Jun
28
comment Getting the encryption/has algorithm used for modem configuration file
Thanks for reporting back. This seems more a modem specific hack than an answer to the question though.
Jun
28
revised Block Ciphers - Standardize plain text
deleted 2 characters in body
Jun
28
revised Do all attacks against PKCS1 v1.5 encryption require an oracle
added 19 characters in body
Jun
28
comment Block Ciphers - Standardize plain text
@RickyDemer PKCS#7 padding seems to be the industry default (I like bit padding better too). Please post an answer instead of putting an answer in a comment like this.
Jun
28
answered Block Ciphers - Standardize plain text
Jun
28
answered Do all attacks against PKCS1 v1.5 encryption require an oracle
Jun
28
comment Do all attacks against PKCS1 v1.5 encryption require an oracle
Very much related, older article on the security site: What specific padding weakness does OAEP address in RSA?. Note that the padding oracle attack is known as "Bleichenbacher's attack".
Jun
28
comment Do all attacks against PKCS1 v1.5 encryption require an oracle
You're welcome, K. Biermann. We're still migrating out of beta, but we're up and running for sure. Always keep side channel attacks in mind when talking RSA - but that goes as much for OAEP as for PKCS#1 v1.5 padding.
Jun
27
comment Getting the encryption/has algorithm used for modem configuration file
You could simply ask the modem manufacturer; indicate you require this information to do a security audit.
Jun
27
revised Getting the encryption/has algorithm used for modem configuration file
deleted 5 characters in body; edited title
Jun
27
answered Getting the encryption/has algorithm used for modem configuration file
Jun
27
comment HMAC for encrypted authentication token: recommended iteration number
@otus I think that the consensus now is that the question can be closed, not deleted if an answer on another question covers the question put forward. That's more of a meta discussion though.
Jun
27
revised Using ECB as RSA encryption mode, but encrypted messages are unique
expanded middle paragraph to indicate inefficiencies of ECB for RSA
Jun
27
revised Using ECB as RSA encryption mode, but encrypted messages are unique
expanded middle paragraph to indicate inefficiencies of ECB for RSA
Jun
26
awarded  Revival
Jun
25
answered Derive cipher IV and cipher Key using PBKDF2 with random salt?