2,563 reputation
622
bio website
location Netherlands
age 40
visits member for 2 years, 4 months
seen 13 mins ago

Java and security expert with over 10 years of experience with the language and with the practical application of cryptographic protocols - including the design of protocols within international standardization bodies. Creator of a heavily used common criteria certified product. Over 30 years of experience with computers. Likes kids, cats, reading, movies and several sports.


Mar
31
comment How can I convert a DER ECDSA signature to ASN.1?
Note that for Java, you can simply perform new BigInteger(1, byte[] r).toByteArray() as the default Java encoding of a BigInteger is identical to the ASN.1 encoding of INTEGER.
Mar
22
awarded  Nice Question
Mar
18
comment Why is H(k||x) not a secure MAC construction?
Thanks I knew by now how Keccak behaves of course, but I forgot to add the information myself.
Mar
18
awarded  Notable Question
Mar
17
comment Modular protocol design
I would pass on that last question as well, it would be highly debatable - you cannot prove if something has a modular design or not. E.g. "has a clear goal" is highly subjective. If this question is asked for a test you should give your own opinion and reasons why you think it is or is not modular instead. Then the given reasoning behind your decission could be evaluated.
Mar
17
awarded  Excavator
Mar
17
revised Cipher Feedback Mode
added a single word "enter" at the right spot
Mar
17
comment Elliptic Curves of different forms
In your openssl example you use "binary curve" twice. Is that intended or a typo?
Mar
17
comment Hash Based Encryption (fast & simple), how well would this compare to AES?
In general, hash functions are not fast compared to block ciphers. So at least the fast part is incorrect, and I'm not sure this is more simple than e.g. AES-CTR, which does approximately the same thing while using a block cipher.
Mar
17
comment Hash Based Encryption (fast & simple), how well would this compare to AES?
@fgrieu That's the answer, not a comment :)
Mar
3
comment How do process calculi, CSP, Promela, … compare?
I've marked this as not an answer PulpSpy. Probably you did not have enough rep. back in the day. You may want to delete this brand spanking old post :)'
Mar
2
comment Would it be secure to use random numbers from random.org in a cryptographic solution?
OK, but we cannot be assured either that random.org does not repeat its random stream on a reboot etc. That would preclude a lot of the above use cases. Basically, we can only hope that random.org is valid from what is pronounced at the front page. That's simply not enough.
Feb
25
comment Using ECDSA keys for encryption
@tylo Setting up an additional PKI structure is not irrelevant though. Of course, if you start up fresh you should definitely create a separation between the two.
Feb
24
revised Using ECDSA keys for encryption
fixed might -> mind and made text a bit easier to read
Feb
17
comment GCM encryption for 256-bit and 512-bit block ciphers
@CodesInChaos The question becomes: what use is a larger block size and if we need a larger block size for security, shouldn't we also increase the security of the authentication tag?
Feb
15
comment How unsafe is to share parts of a password
If a salt is being used, I would say that a hash or a "professional" PBKDF is very likely to be used, yes.
Feb
14
comment Why is a 2048-bit public RSA key represented by 540 hexadecimal characters in X.509 Certificates?
You'll be surprised if you see the PKCS#1 version of a private key. Normally that one has the modulus, the private exponent, the public exponent and normally all CRT parameters as well. Plus DER overhead of course. And - if used - the overhead of the various container formats.
Feb
13
awarded  Popular Question
Feb
12
comment Is this approach to generating a “random” number from a sha512 hash effective?
Cross posted to stackoverflow.com/questions/21695256/… where I've given a more PHP/programming related answer. Please do not cross-post.
Feb
12
comment Current standard for hash function security parameter?
I'm feeling like one of these small clean up fishes swimming after the shark now :)