4,779 reputation
1734
bio website
location Netherlands
age 40
visits member for 2 years, 10 months
seen 53 mins ago

Java and security expert with over 10 years of experience with the language and with the practical application of cryptographic protocols - including the design of protocols within international standardization bodies. Creator of a heavily used common criteria certified product. Over 30 years of experience with computers. Likes kids, cats, reading, movies and several sports.


Oct
9
comment How exactly does AES-NI work?
AES-NI is only about 2 times as fast, but it also frees up a lot of CPU resources that would otherwise be used for encryption of AES. There could also be advantages with regards to side channel analysis and possibly even energy consumption. Speed is not necessarily the only reason - although for AES-NI it's very likely the to be the most important one.
Oct
9
comment Security analysis of Spritz?
That and the fact that it was designed as a drop in replacement as you already noted. RC4 has some interesting properties such as configurable key size which may be tricky to implement using existing block ciphers. Same for code size and state size (probably).
Oct
9
comment Do Export Restrictions Still Apply To The Key Length of RC4?
Beware of import restrictions of other countries though. Especially when importing your ePassport into such countries ;)
Oct
7
answered Session based AES with random key and static salt
Oct
6
comment Does this guarantee a unique 32 bit Hash?
As for the last question, I guess we don't analyze such schemes as $2^{32}$ let alone $2^{16}$ are considered very secure. MD5 cannot be used for collision resistance anymore; as MD5 collisions can be created, it doesn't take much imagination that if you can get the same MD5 output that any deterministic algorithm performed on just the MD5 output must result in the same value, and will therefore also have collisions.
Oct
4
comment What does OIW stand for
Where JTC1 is of course the IT technical committee of ISO/IEC.
Oct
4
revised What does OIW stand for
sentence had only a . but no * at the rear end (sorry for that summary)
Oct
4
comment What does OIW stand for
Thanks Henrick, and I had the enjoyment of upping my Swedish too :) Posted it as an answer if you don't mind. To everybody: anything more definitive as an answer (i.e. what this organization actually comprised of and actually did) would be appreciated.
Oct
4
answered What does OIW stand for
Oct
4
revised What is the difference between “secp…” and “sect…”?
deleted 1 character in body
Oct
4
revised What is the difference between “secp…” and “sect…”?
added 118 characters in body
Oct
3
revised What is the difference between “secp…” and “sect…”?
deleted 24 characters in body
Oct
3
comment What is the difference between “secp…” and “sect…”?
Note that the field size for curves is usually taken to be equal to the effective key size (and it is actually the size of the secret value, but the public key is larger).
Oct
3
revised What is the difference between “secp…” and “sect…”?
added 18 characters in body
Oct
3
answered What is the difference between “secp…” and “sect…”?
Oct
3
comment What does OIW stand for
I hope this is sufficiently on topic. I tried to look up where a particular Algorithm Identifier for ElGamal was defined, but internet searches provided precious little information.
Oct
3
asked What does OIW stand for
Oct
3
comment Has there been any cryptanalysis of AES under a non-uniformly distributed key?
It's my understanding that one of the issues with DES was that it had (relatively few) weak keys and that AES was specifically
Oct
2
comment Has there been any cryptanalysis of AES under a non-uniformly distributed key?
"non-uniformly distributed" does not seem to give much of foot hold to me. The work on related key attacks was made possible by carefully studying the AES key schedule. Just saying that something is not well distributed and work from there is not going to give you any results. Note that the related key attack still has a complexity of $2^{96}$ for one key out of $2^{35}$ so it isn't very practical when AES is used to achieve confidentiality. It just makes it somewhat harder to use AES to create other primitives such as hash functions and PRNG's.
Oct
2
comment How does Blowfish avoid successful cryptanalysis?
@fgrieu No I did assume a bit too much there in relation to the the weak keys...