1,197 reputation
24
bio website callas.org/jon
location Hilbert Space
age
visits member for 2 years, 4 months
seen Apr 15 at 21:29

Cryptographer. Co-author of OpenPGP, DKIM, syslog-sign, ZRTP, the Skein hash function, Threefish cipher, and other things.

Businessman. Co-founder of PGP Corporation, Silent Circle, World Benders, and others. Presently CTO at Entrust.

Software engineer. Worked at the above as well as Apple, DEC, NASA, and others.


Jun
19
answered Is compressing data prior to encryption necessary to reduce plaintext redundancy?
Jun
19
comment OpenPGP Signature Packet hashed data
You guys have it sorted out, it seems. You're right, it's sometimes difficult to describe code in English. -- Jon
Jun
19
answered Is the “Signed on date” of a PGP Signature Verified?
Jun
19
answered How exactly are GPG keys mathematically related, and prime numbers inside of GPG general
Jun
19
answered GPG/PGP Verification of Revocation
Jun
19
answered OpenPGP Public-Key Encrypted Session Key Packet Key ID generation
May
29
answered Is every output of a hash function possible?
May
29
answered Attacks of the MAC construction $\mathcal{H}(m||k)$ for common hashes $\mathcal{H}$?
May
29
answered Which MACs can be converted into a secure unkeyed hash function?
May
15
comment Is it fair to assume that SHA1 collisions won't occur on a set of <100k strings
No, no one has found a way to implement Manuel's 2^51 attack. For that matter, no one has answered my question, "2^51 whats?" 2^51 clock cycles is not very long, and 2^51 years is. Yet both have a work factor of 2^51. (By the way, this is why work factor is a slippery concept.)
May
15
answered RSA with small exponents?
May
15
answered Difficulty of breaking RSA for a given key size
Apr
11
answered What is the largest performed/possible bruteforce attack to date?
Apr
3
comment Can you make a hash out of a stream cipher?
Carter-Wegman MACs are okay for making authenticated encryption, but they're not successful for fast, secure hash functions. As Jalaj points out, there's a different set of security requirements.
Apr
3
answered Can you make a hash out of a stream cipher?
Mar
28
answered How to authenticate over open channel?
Mar
28
answered Unit testing a library RNG and its seeding for practical security
Mar
14
awarded  Editor
Mar
14
comment Predicting values from a Linear Congruential Generator
I've added in more text along with a link to an applicable paper.
Mar
14
revised Predicting values from a Linear Congruential Generator
Added in a reference to an applicable paper.