10,357 reputation
12453
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 3 years, 5 months
seen 53 mins ago

3h
comment Which Block cipher mode should I use?
The best choice of block cipher mode depends on context. Apart from ECB all popular modes are semantically secure. But perhaps you need integrity checks, in which case you might want authenticated encryption, like AES-GCM or a traditional MAC in an encrypt-then-mac scheme. Sometimes you need to preserve the length, sometimes you need nonce reuse resistance, sometimes you need asymmetric authentication, sometimes you worry about certain side-channels, sometimes you don't...
1d
comment test vectors for 3DES seem to in fact be testing DES - not 3DES
Did you confuse bits and bytes? DES has a 56/64 bit key and 3DES has a 168/192 bit key.
1d
answered Security concern about reducing hash value using modulo operation
1d
awarded  encryption
2d
reviewed Close Simple Encrypted Message, With Key Included
2d
reviewed Close Program implementation and flaws
2d
reviewed Close why choose one-time signature ,not directly publish message
2d
comment Do Brute-Force Attacks and Cryptanalysis refute Kerckhoffs's principle?
@xorcoder The limits of brute-force are much lower. Even for 400 bit keys it's quite optimistic. You're underestimating the exponential function.
2d
answered Do Brute-Force Attacks and Cryptanalysis refute Kerckhoffs's principle?
2d
comment Synchronize one time password algorithm
1) This is a programming problem, not a crypto problem. So it's off-topic here. 2) Your question does contain enough information for a diagnosis. 3) One possible issue is that you chose different intervals after which the code changes 4) Another possible issue is that you use different timezones to determine the time (UTC is correct)
Dec
22
comment For which RSA moduli, precisely, is $e=d$ for all $e$?
"for products of distinct primes, these are equal" I don't think so. For odd primes (p-1) and (q-1) always share the factor two, so $\lambda$ is strictly smaller than $\varphi$.
Dec
22
comment For which RSA moduli, precisely, is $e=d$ for all $e$?
Do you really want $\pmod{\varphi(n)}$ or rather $\pmod{\lambda(n)}$?
Dec
22
revised Why shouldn't I use ECB encryption?
added 10 characters in body
Dec
22
comment Viability of an “Unconventional” Hashing Scheme?
I'm pretty sure that the usability impact of this complex scheme is bigger than the usability impact of a stronger password.
Dec
22
revised Best hash-algorithm
deleted 1 character in body
Dec
22
revised Why shouldn't I use ECB encryption?
deleted 16 characters in body
Dec
22
comment Why shouldn't I use ECB encryption?
@Rogue AES-GCM is a decent choice. Note however that it breaks horribly if you ever reuse a nonce/IV.
Dec
22
comment Why shouldn't I use ECB encryption?
ECB does not only leak if messages are identical. It leaks which message blocks (typically 16 bytes) are identical.
Dec
21
comment Can a cryptosystem be unconditional secure if the same key $k \in \mathcal K$ is used for more than one encryption?
You can combine shamir's secret sharing with a one-time-pad to arrive at a scheme that's perfectly secure as long as you're able to generate a unique nonce for each message. Unfortunately the running time is quadratic in the maximum number of messages you can send. This does not free you from the above size limitation, but it doesn't require you to keep track of which parts of the key you already used,
Dec
21
comment Can a cryptosystem be unconditional secure if the same key $k \in \mathcal K$ is used for more than one encryption?
It's certainly necessary that the size of the key must be at least the total size of the messages.