10,487 reputation
12454
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 3 years, 6 months
seen 4 hours ago

8h
comment Merkle Tree resistance against spoofing,splicing and replay?
1) replays are a protocol level concern, and make no sense for a hash function. 2) I don't even know what you mean by spoofing and splicing.
1d
comment Why do Certificate Authorites cross-sign each other?
This is a security question, not a crypto question. So it'd be a better fit for Information Security.
2d
comment Finding strong primes
How big it has to be depends on what you want to use it for. For Diffie-Hellman I'd consider 1024 bits the minimum with 2048 bits recommended. Choosing p=2*q+1 is standard practice when generating Diffie-Hellman groups.
2d
comment Number of keys when using symmetric and asymmetric encryption?
I wouldn't count an asymmetric keypair as two keys.
Jan
22
comment How does RSA padding work exactly?
PKCS#1 describes two paddings, v1.5 padding (which is weak) and OAEP padding (which is recommended). Don't try to invent your own padding.
Jan
22
comment Diffie-Hellman on infinite groups
If you are talking about groups like integers, rational or real numbers, they have two problems. First the memory requirement is exponential in the size of the exponent and second the computing logarithms is easy.
Jan
22
awarded  Announcer
Jan
20
comment Practical Attack on RSA
Key size is of little relevant when considering side channel attacks. Some kinds of side channel attacks can be prevented by constant time implementations, for some you need to shield the hardware.
Jan
20
comment Why is EdDSA collision-resilient with SHA-512?
It's important do distinguish between collisions of SHA-512 itself and collisions of SHA-512 mod q.
Jan
19
comment Public key encryption and big files with NaCL
Do you know how big the file is before you encrypt it?
Jan
19
comment Why are some $x$ coordinates unsuitable for an ECDSA generator point?
For an elliptic curve, about half the x values have two associated points, the other half of the x values has none (they correspond to the twist of the curve).
Jan
18
comment How can I implement modulo 2^32?
In many languages you can simply use an (unsigned) 32 bit integer and the + operator.
Jan
18
comment EncFS - Folder Name Change and lose access
This is not a question about cryptography itself, but about using a particular encryption software. This question might be a better fit for superuser, or probably a software specific mailing list like encfs-users.
Jan
18
comment Performing HMAC with random key before MAC comparison
I've seen suggestions to use this as constant time comparison by people who're afraid that the compiler will optimize the usual constant time comparison code into variable time code.
Jan
17
comment Generate address with RSA private key
Bitcoin does not support RSA. It only supports ECDSA, and only using the secp256k1 curve.
Jan
16
comment Pollard's Rho - Restricting the random function to the exponents
You want the cheapest possible function that's still good enough. Exponentiation is expensive.
Jan
16
reviewed No Action Needed Exploration of Blum Micali Security By Seed Size
Jan
16
comment I have a keyword and cipher text but cannot decode it please help!
Don't vandalize your own post.
Jan
16
revised I have a keyword and cipher text but cannot decode it please help!
rolled back to a previous revision
Jan
16
revised I have a keyword and cipher text but cannot decode it please help!
rolled back to a previous revision