Reputation
7,971
Next tag badge:
63/100 score
25/20 answers
Badges
2 12 42
Impact
~122k people reached

May
18
revised Building a combined encryption scheme from two encryption schemes that's secure if at least on of them is secure
rolled back to a previous revision
May
18
revised Rsa Key Exchange Protocol
added 9 characters in body
May
18
comment Rsa Key Exchange Protocol
I guess, if you have lost your private key, that's as broken as it gets. Made it "known" as I don't believe in "stealing" bits.
May
18
answered Rsa Key Exchange Protocol
May
18
comment Building a combined encryption scheme from two encryption schemes that's secure if at least on of them is secure
@StephenTouset Yeah, so I made it 100%... The other 2% was a bit too little to keep it secret.
May
18
answered Building a combined encryption scheme from two encryption schemes that's secure if at least on of them is secure
May
18
comment Building a combined encryption scheme from two encryption schemes that's secure if at least on of them is secure
What does Gen do, by the way? Generate a symmetric key?
May
18
comment Building a combined encryption scheme from two encryption schemes that's secure if at least on of them is secure
Sounds something such as secret sharing... You know, the only thing cryptographers can do is XOR.
May
18
comment Are digital signatures using preprocessed paper pads possible?
If you transfer the current knowledge back to past then you should also transfer the attacking techniques / crypto analysis. Currently we have fast computers that mainly put the cryptographers at an advantage. If you reverse that then the crypto analysts / attackers may actually be better off.
May
18
comment Elliptic curve brute forcing
Nice, reads well, but I'm unsure about "if not goto step 2".
May
18
comment Could this alternative hash based MAC construction be as, or even more secure than an HMAC?
I would expect the hash function 1. to be precisely positioned at the end of a block and 2. for it to process a final block for this to work. And it could probably made to work. But the above shows that there are probably too many snags for it to become a generic scheme. Note that for Keccak you would not need the encryption at all. You could also have a look at GCM mode / GMAC for accelerated authentication.
May
18
revised Could this alternative hash based MAC construction be as, or even more secure than an HMAC?
added 45 characters in body
May
18
comment Properties of PRNG / Hashes
"But wait, that's not all! As a bonus, you also get O(1) access to any position in the stream!" That's great if you want to regenerate the pseudo random values, but generally it is not something you require from a SPRNG. You just want random data - random data at a certain position makes no sense, especially if you want to reseed. Talking about reseed: CTR in itself doesn't support that notion, so you need to define a protocol to allow for reseeding. CTR on itself is not a good SPRNG in that sense.
May
18
comment Properties of PRNG / Hashes
The Skein paper itself provides support for variable output size. That's pretty close to a PRNG. It doesn't contain any security proof for using it as a PRNG though (to my knowledge). With even better newer Intel x86 processors there is a seeded PRNG build around the RdRand instruction.
May
18
comment Could this alternative hash based MAC construction be as, or even more secure than an HMAC?
This should be pretty readable for a non-expert. Don't hesitate to ask if it is not.
May
18
answered Could this alternative hash based MAC construction be as, or even more secure than an HMAC?
May
18
answered What is the difference between online and offline brute force attacks?
May
17
comment Finding patterns in a gambling game
I'm voting to close this question as off-topic because this is about math rather than crypto.
May
17
comment Why does self-signed HTTPS show an error page, but self-“signed”/made HTTP does not?
I'm voting to close this question as off-topic because this os not about cryptography, it is about policy around TLS.
May
17
reviewed No Action Needed Enigma algorithm Question about the Ringstellung