190 reputation
6
bio website
location Orange County, CA
age
visits member for 2 years, 3 months
seen Jan 6 at 18:13

Aug
10
comment Do MD5's weaknesses affect Oplop?
@fgrieu if the master password has over 100 bits of entropy (e.g. a 20-character base64 string generated by flipping a coin), can it be cracked?
Aug
9
comment Do MD5's weaknesses affect Oplop?
@CodesInChaos it guarantees that Oplop complies with websites that require passwords to contain numerals.
Jan
14
comment Is SHA-256 secure as a CTR block cipher?
I guess the testing aspect is the most important since no one wants to be solely responsible for the potential failure of a system -- if SHA-256 in CTR fails, its implementer is held accountable; if AES-256 fails, everyone is screwed. Though you say a $2^{256}$-block known message can enable key recovery with an effort of 1... how is that possible?
Jan
13
comment What is the most secure hand cipher?
1. Purely academic interest; 2. For the rest of the forseeable future, there will be situations in which people are denied access to private computers.
Jan
13
comment What is the most secure hand cipher?
Thanks for the link. I'll give the RC4 implementation mentioned by Ilmari a try, although it seems a bit too cumbersome to meet my criterion of a hand cipher, especially if it is implemented without the pitfalls of WEP and other broken systems. I'm also interested in other systems that weren't mentioned.