Reputation
877
Top tag
Next privilege 1,000 Rep.
Edit questions and answers
Badges
4 11
Newest
 Yearling
Impact
~10k people reached

  • 0 posts edited
  • 0 helpful flags
  • 80 votes cast
Aug
26
comment Clarification of RFC2246 with regards to Finished Message
Is there a particular reason for why you are using the TLS 1.0 spec and not the TLS 1.2 spec?
Aug
7
comment Are deployed MACs IND-CPA?
And to partially answer your question: Yes, some deployed MACs are also PRFs. Like e.g. HMAC.
Aug
7
comment Are deployed MACs IND-CPA?
First, the IND-CPA game is meant for encryption schemes not MAC's. Secondly, in the IND-CPA game the adversary does not submit one message and gets back two ciphertexts. It's the other way around :-) I.e., he submits two messages and gets back the encryption of one of them. Thirdly, it seems to me now then, that the security notion you should be looking at regarding the MACs is PRF.
Aug
7
comment Are deployed MACs IND-CPA?
I'm a little confused by your title. The security notion usually targeted by MACs is unforgeability against a chosen message attacks (UF-CMA), not IND-CPA. It is not clear to me what it should mean for a MAC to satisfy IND-CPA. When you say that you want the MAC tag to be "random looking" did you mean this in the sense of the MAC being a PRF? Still, note that a MAC does not necessarily have to be a PRF in order to be UF-CMA (a PRF is a secure MAC though). Moreover, it is not necessary for the tag to be "random looking", as you say, in order for an AE scheme to be IND-CPA/IND-CCA secure.
Aug
6
revised Why does WPA-PSK not use Diffie-Hellman key exchange?
added 6 characters in body
Aug
6
comment Why does WPA-PSK not use Diffie-Hellman key exchange?
@Joost I agree with you. I have updated the answer accordingly. Hopefully this is more on point.
Aug
6
revised Why does WPA-PSK not use Diffie-Hellman key exchange?
Large update based on comments, discussing the benefit of DH.
Aug
6
revised Why does WPA-PSK not use Diffie-Hellman key exchange?
Large update based on comments, discussing the benefit of DH.
Aug
6
revised Why does WPA-PSK not use Diffie-Hellman key exchange?
Large update based on comments, discussing the benefit of DH.
Aug
5
answered UKS attack on KEA protocol
Jun
25
answered Dan Boneh's Cryptography lecture - problem with 802.11b
Apr
19
comment Prove there is PRG that is not necessarily one-to-one
@MaartenBodewes Please see the edit. Does that look OK?
Apr
19
revised Prove there is PRG that is not necessarily one-to-one
added 1591 characters in body
Apr
17
awarded  Yearling
Apr
17
answered Prove there is PRG that is not necessarily one-to-one
Apr
17
answered Fault-based transition for crypto proof (a la Shoup) with big probability of fault - does it work?
Apr
10
revised Prove that if we redefine the key space, we can assume Gen chooses a key uniformly
deleted 1 character in body
Apr
9
revised Prove that if we redefine the key space, we can assume Gen chooses a key uniformly
deleted 1 character in body
Apr
9
answered Prove that if we redefine the key space, we can assume Gen chooses a key uniformly
Mar
20
revised MAC in SSH packet encryption, benefits to not including it?
added 2 characters in body