Reputation
10,288
Next tag badge:
77/100 score
15/20 answers
Badges
3 13 46
Newest
 Nice Answer
Impact
~160k people reached

Aug
20
revised Possible to detect if a message is PGP encrypted/signed (ciphertext)
added 202 characters in body
Aug
20
answered Possible to detect if a message is PGP encrypted/signed (ciphertext)
Aug
19
comment How ECDH algorithm selects modulus value?
@hab In the case of curves over $Fp$ the calculations are performed modulus $p$ and $p$ is part of the domain parameters specified by secp192.
Aug
19
comment Testing PRNG quality from ECC public keys?
Well, the RNG is used to generate the private key and the public key is derived from that if I understood correctly. So if you are worrying about repetition then it will have to be repetition for at least the size of the private key. In that case you would get duplicate public keys. So if you find a dupe, then you are sure that the PRNG is bad. Not finding a dupe doesn't mean the PRNG is good though.
Aug
18
comment Prove that H(s) = G(!s) is a CPRNG if G(s) is one
Formatted question. If anybody knows how to best code a binary complement in Tex please edit it in.
Aug
18
revised Prove that H(s) = G(!s) is a CPRNG if G(s) is one
formatting
Aug
18
comment Is calculating HMAC from hashed input a good idea?
@otus Tried to clarify part 2 and added a part about collision resistant hash functions in case this wasn't clear to everybody instead of posting my own answer. Hope you agree, roll back otherwise.
Aug
18
revised Is calculating HMAC from hashed input a good idea?
added 230 characters in body
Aug
18
revised Is it possible to get an RSA encryption key by comparing the unencrypted and encrypted file?
added 219 characters in body
Aug
18
comment Can it ever be impossible to invert a PRNG?
A constraint itself can have more or less effect. You cannot just use the number of constraints in an equation.
Aug
18
comment Is it possible to get an RSA encryption key by comparing the unencrypted and encrypted file?
@aaro4130 If it was that easy to circumvent the encryption used by CryptoWall you would have known about it.
Aug
17
answered Is it possible to get an RSA encryption key by comparing the unencrypted and encrypted file?
Aug
17
comment Hash and salt or salt and hash?
@cpast Could you make that an answer?
Aug
17
comment how many pairs of plaintext-ciphertext are needed before we break AES?
@yyyyyyy I think the expected life time of our Sun is reasonable enough. Otherwise: the expected life time of the universe?
Aug
17
comment Why is it good to split a CTR-mode counter into nonce and counter?
This - in my opinion - doesn't seem to answer the question.
Aug
16
comment How to verify the integrity of RSA encrypted messages?
The Java crypto library is pretty well designed. I haven't reviewed all the source code, but it certainly could be worse and I heard the testing is pretty extensive (if not open sourced). But Java is not that young anymore, so it does have ECB/PKCS5Padding (for symmetric ciphers) and PKCS1Padding (for RSA) as default.
Aug
16
comment How to verify the integrity of RSA encrypted messages?
Pretty please with sugar on top, don't advice to use library defaults for cryptographic algorithms, especially not where Java is concerned.
Aug
16
revised Why must we generate the signature before any compression being done at PGP?
added 23 characters in body
Aug
16
answered Why must we generate the signature before any compression being done at PGP?
Aug
15
comment Is (AES-)GCM parallelizable?
@SEJPM We know that yes :) I just wanted to make the excellent answer by Poncho independent of that of Stephen (he's already corrected his answer by now) and make sure that future readers - not just the top 20 contributors - can understand it without doing all the deductions themselves.