5,070 reputation
1734
bio website
location Netherlands
age 40
visits member for 2 years, 11 months
seen 4 hours ago

Java and security expert with over 10 years of experience with the language and with the practical application of cryptographic protocols - including the design of protocols within international standardization bodies. Creator of a heavily used common criteria certified product. Over 30 years of experience with computers. Likes kids, cats, reading, movies and several sports.


Oct
25
comment Use case of RSA CRT
@fgrieu I've seen the same validation requirement for straight RSA as well. In general it makes sense as signature verification is relatively fast.
Oct
25
answered How secure is a lagged fibonacci sequence for encrypting brief messages?
Oct
25
revised Use case of RSA CRT
added 175 characters in body
Oct
25
answered Use case of RSA CRT
Oct
25
comment What do you call one time pad where pseudo-random numbers are used?
I like this question. It's simple, but seeing the number of questions on SO that confuse a OTP and stream cipher, it can be a good reference to use within comments and answers.
Oct
25
revised What do you call one time pad where pseudo-random numbers are used?
added 12 characters in body; edited title
Oct
24
comment Secure way to derive separate encryption and MAC keys from a single master key?
@RickyDemer Hmm, hard to put in words, tried "if larger input is allowed".
Oct
24
revised Secure way to derive separate encryption and MAC keys from a single master key?
deleted 3 characters in body
Oct
24
revised Does the size of a SSH ECDSA key determine the hash algorithm?
added 84 characters in body
Oct
24
revised Does the size of a SSH ECDSA key determine the hash algorithm?
edited title
Oct
24
comment Does the size of a SSH ECDSA key determine the hash algorithm?
@otus I was wondering, so I provided the answer myself and flagged it for transfer to IT security.
Oct
24
answered Does the size of a SSH ECDSA key determine the hash algorithm?
Oct
24
revised Security of KDF1 and KDF2 (hash based KDF's)
added 1 character in body
Oct
24
comment Secure way to derive separate encryption and MAC keys from a single master key?
@RichieFrame Let us agree that it is fast (especially on 64 bit) and secure, but that it doesn't scale well :)
Oct
24
answered What can be learned from the ciphertext of LibSodium's crypto_box_detached()?
Oct
24
comment Secure way to derive separate encryption and MAC keys from a single master key?
I toned that down somewhat and expanded the answer. I based that assumption on that of Ilmari who supplied the other answer. Nevertheless, KDF1/2 are used in practice and I've not seen any attacks on it either.
Oct
24
revised What can be learned from the ciphertext of LibSodium's crypto_box_detached()?
added 76 characters in body
Oct
24
revised Secure way to derive separate encryption and MAC keys from a single master key?
toned down the "are secure" into "should be secure", created an extended answer
Oct
24
revised Security of KDF1 and KDF2 (hash based KDF's)
deleted 73 characters in body; edited tags
Oct
24
revised Secure way to derive separate encryption and MAC keys from a single master key?
toned down the "are secure" into "should be secure", created an extended answer