4,856 reputation
1734
bio website
location Netherlands
age 40
visits member for 2 years, 11 months
seen 11 mins ago

Java and security expert with over 10 years of experience with the language and with the practical application of cryptographic protocols - including the design of protocols within international standardization bodies. Creator of a heavily used common criteria certified product. Over 30 years of experience with computers. Likes kids, cats, reading, movies and several sports.


Oct
4
comment What does OIW stand for
Thanks Henrick, and I had the enjoyment of upping my Swedish too :) Posted it as an answer if you don't mind. To everybody: anything more definitive as an answer (i.e. what this organization actually comprised of and actually did) would be appreciated.
Oct
4
answered What does OIW stand for
Oct
4
revised What is the difference between “secp…” and “sect…”?
deleted 1 character in body
Oct
4
revised What is the difference between “secp…” and “sect…”?
added 118 characters in body
Oct
3
revised What is the difference between “secp…” and “sect…”?
deleted 24 characters in body
Oct
3
comment What is the difference between “secp…” and “sect…”?
Note that the field size for curves is usually taken to be equal to the effective key size (and it is actually the size of the secret value, but the public key is larger).
Oct
3
revised What is the difference between “secp…” and “sect…”?
added 18 characters in body
Oct
3
answered What is the difference between “secp…” and “sect…”?
Oct
3
comment What does OIW stand for
I hope this is sufficiently on topic. I tried to look up where a particular Algorithm Identifier for ElGamal was defined, but internet searches provided precious little information.
Oct
3
asked What does OIW stand for
Oct
3
comment Has there been any cryptanalysis of AES under a non-uniformly distributed key?
It's my understanding that one of the issues with DES was that it had (relatively few) weak keys and that AES was specifically
Oct
2
comment Has there been any cryptanalysis of AES under a non-uniformly distributed key?
"non-uniformly distributed" does not seem to give much of foot hold to me. The work on related key attacks was made possible by carefully studying the AES key schedule. Just saying that something is not well distributed and work from there is not going to give you any results. Note that the related key attack still has a complexity of $2^{96}$ for one key out of $2^{35}$ so it isn't very practical when AES is used to achieve confidentiality. It just makes it somewhat harder to use AES to create other primitives such as hash functions and PRNG's.
Oct
2
comment How does Blowfish avoid successful cryptanalysis?
@fgrieu No I did assume a bit too much there in relation to the the weak keys...
Oct
1
comment Possible Digital Signature Hack?
@mFeinstein It's no wonder that that sentence in the white paper (which one?) left you a little confused. Better forget about it.
Oct
1
comment How does Blowfish avoid successful cryptanalysis?
What do you mean with "effective cryptoanalysis"? You mean why it hasn't been broken? There has certainly been cryptoanalysis on Blowfish, and there seem to be results that make it less suitable for specific solutions. Nowadays you should try and use 128 bit or higher block ciphers.
Oct
1
comment Triple DES in Firefox - in practice
In general your description on how to generate a key from a password is correct, but the answer seems otherwise made up of assumptions instead of knowledge or references.
Oct
1
comment Why are we not using multiple ciphers per message?
Please note that encryption usually takes a limited number of bytes. Now it seems you are using a smart order of encryption primitives (largest block size last, EC(IES) first), but it is something that already makes the encryption scheme more complex.
Oct
1
comment Why are we not using multiple ciphers per message?
@RickyDemer I think that for crypto, that first comment misses a smiley :) The potential number of outputs would be a bit high.
Sep
30
comment EC Public Key length in ASN.1 DER
@WillemHengeveld Could you make that an answer? Groetjes.
Sep
30
awarded  Explainer