3,562 reputation
629
bio website
location Netherlands
age 40
visits member for 2 years, 8 months
seen 2 hours ago

Java and security expert with over 10 years of experience with the language and with the practical application of cryptographic protocols - including the design of protocols within international standardization bodies. Creator of a heavily used common criteria certified product. Over 30 years of experience with computers. Likes kids, cats, reading, movies and several sports.


1d
reviewed Leave Open Elliptic curve group over a prime finite field $F_p$
1d
reviewed Leave Open Key Derivation from Random Seed
1d
comment True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
CSPRNG is a subclass of PRNG and was of course implied. To state in general that PRNG's are not considered secure is of course bunk. Maybe you should also read Dealing with Bias although I think that that Wikipedia page is not of a very high standard. Note that adding a second layer will not create a well distributed output (by itself); your output would still not be a good fit for a symmetric key let alone an OTP.
1d
revised True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
added 4 characters in body
1d
comment True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
Cryptography is non-negotiable, and won't be altered by belief.
1d
answered True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
2d
revised Example Rainbow Table Generation
added 37 characters in body
2d
comment Are there any Javascript CSPRNGs?
This question appears to be off-topic because it is about implementations for a specific runtime.
2d
answered Does 3-DES take approximately the same time to encrypt 1B and 1KB?
2d
comment Does 3-DES take approximately the same time to encrypt 1B and 1KB?
Could you show us the code? How do you calculate the IV (if any?)
Jul
24
comment Vigenère cipher: Security when key length and plaintext length are the same
@JohnDeters If he can predict it tomorrow, it would not be perfectly random to him, now wouldn't it? I meant that somebody probably has to remember the key; so it isn't fully random to the keeper. Sorry bad joke, but the comment stays.
Jul
24
comment Lowest number challenge scheme
Ah, OK. I guess I have to read more into it, my apologies.
Jul
24
comment Where is the OID and ASN.1 specified for AES_CMAC?
Note: I've searched both the Bouncy Castle libs as well as the OID repository to no avail.
Jul
24
comment Where is the OID and ASN.1 specified for AES_CMAC?
The issue may be that CMS authenticated data is probably not used that much. Would it be an option to specify CCM instead? It uses CBC-MAC underneath, but it is secure and probably more widely supported.
Jul
24
comment Vigenère cipher: Security when key length and plaintext length are the same
@Nova To the attacker, anyway :P
Jul
22
comment Spoofing protocol nonce
Fixed my name, think your message format is better than the one I suggested (which only included minimal changes). And +1 of course.
Jul
22
revised Spoofing protocol nonce
fixed my name, made it link to answer, which is now way way WAY down :)
Jul
20
revised KDF based on HMAC-SHA-256
added 134 characters in body
Jul
20
revised Spoofing protocol nonce
made it more clear according to comments below
Jul
20
comment Spoofing protocol nonce
Yes, I did exactly mean that.