Reputation
14,530
Top tag
Next privilege 15,000 Rep.
Protect questions
Badges
3 16 60
Newest
 Nice Answer
Impact
~233k people reached

Jan
30
comment Side channel security of HMAC in software
Yeah, I heard about that remark. But does that mean that the algorithm is completely free of side channel attacks by design? Would that also be the case for e.g. Keccak / SHA-3?
Jan
30
comment Theoretical security of bit rotation for encyption
Bit shuffling is indeed used within (block) ciphers. You need to compose your cipher with more techniques to make a secure cipher. Glad to hear you take an interest in crypto and allow others to validate your security schemes.
Jan
30
revised Side channel security of HMAC in software
added 55 characters in body
Jan
30
comment Generating passwords from a master password using rules
Although this is on topic here, I don't think we should encourage dupes. I think the question should be closed unless it is made specific to a cryptographic algorithm to perform the derivation.
Jan
30
asked Side channel security of HMAC in software
Jan
29
comment Bilinear pairing using jPBC in Java
I'm voting to close this question as off-topic because it is about implementing crypto rather than a question about cryptography itself.
Jan
29
comment Bilinear pairing using jPBC in Java
This is off topic here because it asks about applying crypto in a specific language. It would be off topic on stackoverflow because you don't show what you tried and where you are stuck.
Jan
29
comment Should the most significant byte of a cryptograhic key be nonzero?
@fkraiem Thanks, made last section stronger
Jan
29
revised Should the most significant byte of a cryptograhic key be nonzero?
REmoved "even" twice, sounds somewhat demeaning. Made last point somewhat stronger after comment of fkraiem.
Jan
28
comment Is H'(M)=5*M + 9*H(M) mod 2^n a secure hash?
@DrLecter It feels much as an exercise to me. It's about reasoning and finding a counterexample.
Jan
28
answered Should the most significant byte of a cryptograhic key be nonzero?
Jan
28
comment Vulnerabilities in SHA-1
Space is a bit short here to repeat all the papers written about SHA-1. Your frequency analysis was bound to fail, but that tells absolutely nothing about the security or insecurity of SHA-1.
Jan
28
comment Is H'(M)=5*M + 9*H(M) mod 2^n a secure hash?
How is $H$ defined? I see a formal definition of $H'$ but not of $H$.
Jan
28
answered RSA-OAEP: How does it work?
Jan
28
comment Degrade in performance with SSL_OP_SINGLE_ECDH_USE?
For OpenSSL specific implementation / deployment questions you're better off at e.g. superuser or Unix).
Jan
27
comment How can a message encrypted with the public key be decrypted with the private key?
I think the title needs some work. Generally the plain text is encrypted with a public key and the resulting ciphertext is decrypted with a private key.
Jan
27
comment AES key and block size
@Mok-KongShen Could you turn that into an answer? "Read the standard" is not much of an answer in itself, but maybe you can quote the pseudo code? Otherwise I think the question has to be closed.
Jan
27
revised Forward Secrecy when using non-ephemeral DH
added 374 characters in body
Jan
27
revised Forward Secrecy when using non-ephemeral DH
added 374 characters in body
Jan
26
answered Forward Secrecy when using non-ephemeral DH