Reputation
7,667
Next tag badge:
61/100 score
23/20 answers
Badges
2 11 42
Newest
 Enlightened
Impact
~115k people reached

Apr
19
comment nonce of AES-GCM in SSL
I've left out the "I don't know, because I didn't design it" part, I guess that's kind of implied.
Apr
19
revised nonce of AES-GCM in SSL
added 54 characters in body
Apr
19
answered nonce of AES-GCM in SSL
Apr
19
comment nonce of AES-GCM in SSL
That's a nice text, however in versions prior to TLS 1.2 it seemed that the previous block was used, and in TLS 1.2 it specifies opaque IV[SecurityParameters.record_iv_length] where the IV length is identical to the block size. In other words, the CBC mode encryption doesn't use this construct at all.
Apr
19
comment Retrieve value of private key after encryption with the public key
Obviously raising the modulus to the public key exponent modulo the same modulus does make zero (sense) :P
Apr
18
reviewed Approve Retrieve value of private key after encryption with the public key
Apr
18
revised Retrieve value of private key after encryption with the public key
edited body
Apr
18
revised Using HMAC SHA256 to protect payment files in local trusted network
added 23 characters in body
Apr
18
answered Using HMAC SHA256 to protect payment files in local trusted network
Apr
18
comment Is MCrypt's 8-bit OFB mode secure?
www.distorted.org.uk just returns It works!. On the good side, IACR is reputable, the paper doesn't look anything like snake oil and he seems to have worked with Philip Rogaway.
Apr
18
comment Is MCrypt's 8-bit OFB mode secure?
The problem with that paper is that I cannot find any references to it, nor any notions of peer review. The author talks of "we" but I see only one author mentioned. It doesn't seem to be published by a major institution either. I'm not saying that the paper is incorrect in any way but I would not accept all the conclusions without another good look. If you have any pointers to peer reviews please include them!
Apr
18
comment Is MCrypt's 8-bit OFB mode secure?
Ignoring the weirdness of a library supporting an encryption mode that its own developers describe as "insecure" and recommend "not to use it" -- what's so strange about that? You can include it for completeness and - more importantly - backwards compatibility. Kudos to the developers to mention that it shouldn't be used. Same goes for 8 bit CFB mode of course, if just for reasons of efficiency.
Apr
18
revised Retrieve value of private key after encryption with the public key
deleted 24 characters in body; edited title
Apr
18
revised Retrieve value of private key after encryption with the public key
added 65 characters in body
Apr
18
answered Retrieve value of private key after encryption with the public key
Apr
18
comment Prove there is PRG that is not necessarily one-to-one
Probably correct if dropping bits of the input is allowed. I presume it is, but in general you would expect that a random number generator behaves differently for different seed input. Can anybody confirm?
Apr
16
comment What is a Key Derivation Function?
This is probably not a "more formal security definition" of a KDF.
Apr
16
comment What is a Key Derivation Function?
The missing key expansion, the focus on passwords and the fact that it certainly is not formal as requested made me vote down this answer.
Apr
16
comment What is a Key Derivation Function?
@user4982 If you could post an abstract of that text together with your link than it would make an excellent answer.
Apr
16
answered Are keys generated by the user or block cipher algorithms themselves?