7,237 reputation
21142
bio website
location Netherlands
age 41
visits member for 3 years, 4 months
seen 8 hours ago

Security professional with many years of experience with the practical application of cryptographic algorithms and protocols. I'm helping with the design of protocols and API's within international standardization bodies. Lead developer of a common criteria certified product. Over 30 years of general experience with computers.


Mar
23
comment Is it safe to use PBEWithMD5AndDES?
Note that we have a top four user with the same initials, it would be helpful if you could change your alias to avoid confusion.
Mar
23
answered Is it safe to use PBEWithMD5AndDES?
Mar
21
comment About the Security of PCBC Encryption Mode
What's wrong with normal CBC + HMAC over IV and ciphertext?
Mar
21
comment Decryption of message in IBE without random oracle using bilinear pairig reg
PS it reads "pairig" in the title, I presume "pairing"? What's a "reg", "registration"?
Mar
20
comment Information-theoretic bound on leakage by timing measurement
That makes it a lot more clear, thanks. Hopefully somebody is able to answer, it may require some research (I don't expect any ready made quotes here, but I've been wrong before).
Mar
20
comment Information-theoretic bound on leakage by timing measurement
What a strange situation. The attacker could just leak the key with some port knocking protocol?
Mar
20
comment Why is diffie hellman sha1 used instead of diffie hellman
Initially pointed to the wrong standard. That one basically described an identical scheme, so no harm to the answer otherwise. When in doubt, read the correct standard :)
Mar
20
revised Why is diffie hellman sha1 used instead of diffie hellman
wrong standard, same idea
Mar
20
revised Encrypting small values with RSA private key
deleted 2 characters in body
Mar
20
comment Why is diffie hellman sha1 used instead of diffie hellman
When in doubt, read the standard.
Mar
20
answered Why is diffie hellman sha1 used instead of diffie hellman
Mar
20
revised What is the most light-weight symmetric cipher thats still usefull?
edited tags
Mar
19
comment Deciphering text encrypted with a changing cipher
In general I don't think you want to (directly) mix the plaintext with the algorithm or key. That kind of security is ruled out by chosen plaintext attacks anyway.
Mar
19
comment Deterministically generate a RSA public/private key pair from a passphrase (with sufficient entropy)?
I've added another drawback, I presumed that you would agree with it :P
Mar
19
revised Deterministically generate a RSA public/private key pair from a passphrase (with sufficient entropy)?
added drawback with regards to algorithm
Mar
19
comment ECDSA for encryption
What are your goals and limitations? Why would a hybrid encryption scheme - as normally used with ECC - not be a good fit?
Mar
18
comment Creating a small number from a random octet string
Thanks for playing, but that's not enough. Only values of $2^y$ can be derived this way, and for those you can just take $y$ bits. Division does not work on bits, you cannot have partial bits.
Mar
18
revised Creating a small number from a random octet string
added 60 characters in body; edited title
Mar
17
revised What practical uses can random hash collisions be put to?
added 109 characters in body
Mar
17
comment What practical uses can random hash collisions be put to?
You could use the value as well to derive a key and hide some information, still with the same signature.