68 reputation
4
bio website
location
age
visits member for 6 months
seen May 12 at 17:30

Feb
18
comment Can a properly implemented ed25519 private key with public underlying data be cracked?
@CodesInChaos You're right, though the only algorithm like that I can think of is Lamport, which is explicitly a one time signature algorithm and is usually noted as such. And that is weakened not by known plain text but by what is essentially your key being published as part of the signature if I recall correctly.
Feb
14
awarded  Teacher
Feb
14
answered Can a properly implemented ed25519 private key with public underlying data be cracked?
Feb
14
awarded  Scholar
Feb
14
awarded  Supporter
Feb
14
accepted Perfect Forward Secrecy with Pre-shared Key
Feb
13
comment Perfect Forward Secrecy with Pre-shared Key
Yeah, all great points. Definitely appreciate it. I'm hoping to be able to avoid the lost messages issue completely and just fail and tell the user to re-synchronize again. It'll really depend on how well the service I'm using for notifications works.
Feb
13
comment Perfect Forward Secrecy with Pre-shared Key
I should have phrased this question in a more practical way. Hash function will be SHA256, K will be used as a AES key in OCB or CCM mode so I don't believe the key stretching would be necessary though it's probably a good idea to do it anyways.
Feb
13
awarded  Student
Feb
13
asked Perfect Forward Secrecy with Pre-shared Key