640 reputation
19
bio website
location Netherlands
age 39
visits member for 1 year, 5 months
seen 16 hours ago
stats profile views 15

Java and security expert with over 10 years of experience with the language and with the practical application of cryptographic protocols - including the design of protocols within international standardization bodies. Creator of a heavily used common criteria certified product. Over 30 years of experience with computers. Likes kids, cats, reading, movies and several sports.


Apr
17
comment decryption many time pad
But I managed to misspell one word on the first attempt :)
Apr
16
comment Ciphertext-only attack on Simplified DES
You can probably brute force both, but only if you have enough information regarding the plain text. If the plain text is just random bits then you have no way of determining if your brute force attack succeeded...
Apr
2
revised What are advantages of using a HMAC over RSA with SHA-1 hashes?
small but important spelling mistake must -> much
Apr
2
suggested suggested edit on What are advantages of using a HMAC over RSA with SHA-1 hashes?
Apr
2
comment What are advantages of using a HMAC over RSA with SHA-1 hashes?
@OwenOrwell Sorry for the misunderstanding, that was about a typo in the answer, I'll edit it.
Mar
22
comment Partial decryption of large file in AES-GCM (or other modes)?
Anything missing from my answer, sid?
Mar
20
comment Encrypting and Decrypting a 19-digits long BigInteger
Please also see the cross post on stackoverflow
Mar
20
comment Encrypting and Decrypting a 19-digits long BigInteger
Same as my answer on stackoverflow really, with some added info.
Mar
17
revised Is this encryption algorithm build from MD5 secure?
Made explicit that the given calculations answered the original question, not the updated one
Mar
17
comment Key collision in scrypt and hkdf
@PaĆ­loEbermann besides that, if you ever are asked to deliver a product to an organization that takes security seriously, using MD5 or even SHA-1 is the equivalent to taking a red flag to the middle of a battle field (I've got the scars to prove it :) ).
Mar
17
suggested suggested edit on Is this encryption algorithm build from MD5 secure?
Mar
17
comment What are the constraints for an IV using AES in CBC mode?
The "IV" for GCM is actually called a nonce, and as the name suggests, it does not have to be indistinguishable from random. On the other hand, if the nonce is not unique then the consequences will be that all confidentiality of the plain text is lost. You may read the NIST requirements for the nonce in the CTR mode specifications.
Mar
17
comment Low Public Exponent Attack for RSA
Glad you found the right site :)
Mar
17
comment Is AES-256 a post-quantum secure cipher or not?
@CodesInChaos could you post your first comment as an answer?
Mar
13
answered Partial decryption of large file in AES-GCM (or other modes)?
Mar
12
awarded  Popular Question
Mar
11
comment Method and explanation for calculating difference in speed between DES and RSA
The speed difference should be very noticable on a CPU platform. So your professor is likely not interested in precise numbers. To compare speed: openssl command line has performance related functionality. For fun, also generate a high security RSA key pair (16 Kib) and see how long that takes.
Mar
3
comment What information to include is the 'info' input for HKDF?
The IKM certainly is most important regarding the entropy within the derived key, but the info part should certainly be used to derive the different keys. As always, there's the issue with terms and definitions, I'll check out the HKDF (again, I've implemented the function) to see if I can make changes to make the answer use identical terms & definitions.
Mar
3
comment Can I combine two PRNGs to make use of more seed data?
There are by definition only 2^160 possible streams because the state is 160 bits... And 160 bits is a lot.
Mar
3
revised Can I combine two PRNGs to make use of more seed data?
added 161 characters in body