198 reputation
6
bio website
location
age
visits member for 2 years, 7 months
seen Jul 3 at 12:53

Computer engineer: a lot of C, PHP, and Python, plus a bit of lots of other stuff. Linux user. Amateur cryptonerd and general science and math geek.


Jul
3
comment Attacks on AES-128 (ECB) based on some knowledge of plaintext
Very helpful, thanks!
Jul
3
accepted Attacks on AES-128 (ECB) based on some knowledge of plaintext
Jul
2
awarded  Curious
Jul
1
comment Attacks on AES-128 (ECB) based on some knowledge of plaintext
As I said, it's not my protocol, it's a third party protocol. My goal is to be able to communicate privately between a client and a server using this protocol, but I'm not convinced that the protocol is very secure in this regard (the protocol does not provide authentication, but it is shared key).
Jul
1
asked Attacks on AES-128 (ECB) based on some knowledge of plaintext
Sep
18
revised Can PBKDF2 be used to create an XOR cipher key to encrypt random plaintext?
Removed OTP from title, as well.
Sep
18
comment Can PBKDF2 be used to create an XOR cipher key to encrypt random plaintext?
Ugh, sorry about that. I guess I was using it in a kind of colloquial way, but you're right, it's obviously not a real OTP.
Sep
18
comment Can PBKDF2 be used to create an XOR cipher key to encrypt random plaintext?
@CodesInChaos: That's true, but I didn't say anything about an OTP =). I think someone else added that tag, I just removed it.
Sep
18
revised Can PBKDF2 be used to create an XOR cipher key to encrypt random plaintext?
Fixed typo, removed OTP tag.
Oct
26
comment Seed a PRNG with random data and a password
Thanks, nice simple idea.
Oct
26
accepted Seed a PRNG with random data and a password
Oct
24
awarded  Editor
Oct
24
revised Seed a PRNG with random data and a password
Added some more details about the PRNG and seed size.
Oct
24
comment Seed a PRNG with random data and a password
Good question. I guess I've been assuming the key file is the same size as the seed, which I think will be a fair assumption for this application.
Oct
24
asked Seed a PRNG with random data and a password
Jul
27
accepted PRNG taking advantage of very large seed
Jul
27
comment PRNG taking advantage of very large seed
@DavidSchwartz: Ok, I think I finally get it now =). Just use a good PRNG and I don't have to worry about "making the most" of my random seed. That being said, it probably doesn't do any good to use a seed that's bigger than the PRNGs internal state, right?
Jul
17
awarded  Commentator
Jul
17
comment PRNG taking advantage of very large seed
I'm not worried about brute force: I'm worried about patterns in the output if I have to generate thousands of times more data than what is in the seed. Is that what you mean by the strength of the PRNG?
Jul
17
comment PRNG taking advantage of very large seed
@CodeInChaos: Can you elaborate on that? How does several thousand bits of true random data not increase security over 512 bits?