3,679 reputation
630
bio website
location Netherlands
age 40
visits member for 2 years, 8 months
seen 6 hours ago

Java and security expert with over 10 years of experience with the language and with the practical application of cryptographic protocols - including the design of protocols within international standardization bodies. Creator of a heavily used common criteria certified product. Over 30 years of experience with computers. Likes kids, cats, reading, movies and several sports.


Jul
27
revised Elliptic Curve Cryptography
added 22 characters in body
Jul
27
answered Key Derivation from random salted seed, HMAC and HMAC based KDF
Jul
27
comment CSPRNG that cannot be used as random extractor
@PaŭloEbermann that's the thought that crept up to me as well when I was typing up the question and reading through the NIST specs. Still, I think it is interesting to see what happens if you indiscriminately supply entropy to a CSPRNG. Will there be some CSPRNG's that cannot handle that situation? Or is the security definition of a CSPRNG defined in such a way that it must operate correctly given enough entropy?
Jul
27
answered Compression function to guarantee randomness of one time pads?
Jul
27
awarded  Custodian
Jul
27
reviewed Reviewed Understanding Lattice based cryptosystem
Jul
27
comment What should I pay attention to when implementing RSA signature verification?
Still think this is "too broad", but without going into details, the main thing with regards to signature verification is that you need to be able to trust the public key somehow. Making sure that you are actually verifying the correct data is also very important, and more tricky than you might expect.
Jul
27
revised True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
distinction for full entropy source , after some additional research
Jul
27
asked Whitening and randomness extraction
Jul
27
asked CSPRNG that cannot be used as random extractor
Jul
27
comment What should I pay attention to when implementing RSA signature verification?
You've listed some requirements for your module. That's great, but without a use case nor runtime environment it's hard for us to add other ones. Not thinking about signature verification as decryption would be a good idea.
Jul
27
revised True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
added 134 characters in body
Jul
27
revised Do I need to prepare plain text before encryption?
added 65 characters in body
Jul
27
revised True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
added 310 characters in body
Jul
26
revised True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
made answer more precise
Jul
26
reviewed Leave Open Elliptic curve group over a prime finite field $F_p$
Jul
26
reviewed Leave Open Key Derivation from random salted seed, HMAC and HMAC based KDF
Jul
26
comment True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
CSPRNG is a subclass of PRNG and was of course implied. To state in general that PRNG's are not considered secure is of course bunk. Maybe you should also read Dealing with Bias although I think that that Wikipedia page is not of a very high standard. Note that adding a second layer will not create a well distributed output (by itself); your output would still not be a good fit for a symmetric key let alone an OTP.
Jul
26
revised True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
added 4 characters in body
Jul
26
comment True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
Cryptography is non-negotiable, and won't be altered by belief.