180 reputation
9
bio website
location
age
visits member for 8 months
seen yesterday

Lucky those who have knowledge to help and assist others :)


1d
comment Is there a Javascript and Java implementation of a good CSPRNG
It has been asked on this forum already and to how I perceived it an XOR combination of two PNRG outputs could be a way to allow for some better results. Hence when available I assume the browsers (i.e. Mozilla's RandomSource.getRandomValues() function could be eventually "mixed in your sha256 seed hash feedback pnrg feedback".
1d
comment Is there a Javascript and Java implementation of a good CSPRNG
for some inspiration you could have a look into how the linux kernel handles the /dev/urandom csprng (here: github.com/torvalds/linux/…*r%2C+__u8+*out%29 ). It looks to be the application of a SHA1 hash which the output is paritally feedback to the randomsource entropy source. To have hashing SHA256 in javacript for implementing the desired "CS"PRNG you could benefit from the standord javascript crypt lib crypto.stanford.edu/sjcl
1d
comment what are the security benefits of LUKS?
@starfry all very valid points. Yet a setup using dm-crypt or else to directly encrypt a block device might not necessarily be missing any similar improvements. when really talking about pro/cons of either setup one would need to be more specific. Simply to decide to go withou LUKS must not mean that some safety measures are not adopted just as well hence making both having the same relative strength (yet having plausible deniability on the dm-setup).
Nov
19
awarded  Tumbleweed
Nov
12
asked Hokkaido (proof-of-Work system) and pseudo-random permutation table
Nov
12
revised what are the security benefits of LUKS?
added some specifictiy
Nov
12
answered what are the security benefits of LUKS?
Nov
12
revised Can hashing become encrypting?
added an update
Nov
11
awarded  Commentator
Nov
11
comment TLS - self encrypting to avoid tls setup, secure?
if they have an ideal password (hence one that provides for the amount of ramdoness to provide for the n bits key that is used for the symmetric encryption) then to what I understand yes. After als TLS also will end up using symmetric encryption in the second step, only of course not by using a key derived from a password, but a random source. Yet as I said with an ideal password and the same cipher used it is essentially the same thing :), thanks
Nov
11
awarded  Teacher
Nov
11
answered TLS - self encrypting to avoid tls setup, secure?
Nov
11
accepted Are all block ciphers FPE (format preserving encryption)?
Nov
11
asked Encryption in which ciphertext is bigger than plaintext?
Nov
11
comment Are all block ciphers FPE (format preserving encryption)?
thanks! The potential "breaking of FPE" due to addition of IV and alike is understood. Also the definition of block cipher is exhaustive. Partly my question was also wondering if E(K,P): K x {0,1}^n -> {0,1}^(n+x(K)) would exists?
Nov
11
revised Are all block ciphers FPE (format preserving encryption)?
typos
Nov
11
comment Deterministically combine more than one source of entropy
@catpnosis valid hint. Yet the danger/attack depends on knowing the other combined entropy sources more imporantly than on a flaw of the combining process
Nov
11
awarded  Scholar
Nov
11
accepted Can hashing become encrypting?
Nov
11
comment Can hashing become encrypting?
And terminology wise would the scheme suggested be (a) a hashing stil or did it (b) became an encryption or else (c)?