8,789 reputation
12041
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 2 years, 9 months
seen 2 mins ago

18m
comment How can I convert numbers into prime numbers?
Hashing to primes is easy. Just seed a PRNG with the hash of the input and use it to generate a prime with any standard algorithm.
21h
comment Are there any elliptic curve asymmetric encryption algorithms?
@hunter Why? What do you gain from encrypting the message itself with ECC instead of hybrid encryption? ECIES has a standard asymmetric encryption API. There are a few situations where RSA works but ECIES does not, but they're relatively exotic.
21h
comment What is a 'secret key factory'? What precisely is it doing?
Your example "128 bit key" has only 64 bits once you convert it from hex to bytes.
21h
revised What is a 'secret key factory'? What precisely is it doing?
added 17 characters in body
1d
comment Does AES-128 have the same strength as AES-256 with a padded key?
While simple padding might not cause any immediate weaknesses, I strongly recommend using random keys uniformly distributed over all 256 bits. That's the way AES has been analyzed, that's what's modeled by a PRP (pseudo-random-permutation) helping with security proofs and it avoids concerns over the weak schedule. Use a proper PRF or hash to expand the key not such an ad-hoc scheme.
1d
comment Does AES-128 have the same strength as AES-256 with a padded key?
I wouldn't be confident in too simply paddings since the AES key schedule is relatively weak. Each half of the 256 bit key gets mixed in less often compared with the 128 bit key since AES-256 only as 1.4 times as many rounds, not twice as many. The additional rounds might compensate for the weaker key schedule in padded AES-256 compared with AES-128, but it certainly feels risky. It might be better to simply concatenate the 128 bit key to itself which at least mixes in the key more often.
1d
comment Does AES-128 have the same strength as AES-256 with a padded key?
if you use a good expansion (e.g. SHA256(key)), AES-256 will be stronger against cryptoanalysis since it has 14 rounds instead of just 10. For the same reason AES-256 has lower performance than AES-128.
Apr
12
comment Given a message and signature, find a public key that makes the signature valid (ECDSA)
@DrLecter Can't you simply use the same algorithm, but using $M_2$ as input? I expect to get out some public key, but a public key where the corresponding private key isn't known by the attacker.
Apr
12
comment Given a message and signature, find a public key that makes the signature valid (ECDSA)
See ECDSA Signatures allow recovery of the public key on bitcointalk.org
Apr
12
comment Given a message and signature, find a public key that makes the signature valid (ECDSA)
Check out 4.1.6 Public Key Recovery Operation in Certicom - SEC 1: Elliptic Curve Cryptography
Apr
12
revised Difference between plain AES CTR and “CCM-style” CTR
edited tags
Apr
11
awarded  Deputy
Apr
10
comment Difference between plain AES CTR and “CCM-style” CTR
Unfortunately there isn't one standard CTR mode, different protocols use different ways of combining the counter with the IV and incrementing it.
Apr
10
comment Leak-proof protocol: is such a thing possible?
Another covert channel: timing
Apr
10
comment cryptography and use of python programming language
There are some nice libraries for python, such as SAGE or Charm and it's a high level language so it's good for producing working programs quickly. On the other hand it sucks for high performance and side channel resistant crypto implementations. So it's nice for research but not for production crypto.
Apr
10
comment Why do we encrypt-then mac but sign-then-encrypt?
We should sign followed by authenticated encryption.
Apr
8
comment Multi cipher CTR
@user1028028 Why would you want to do that? It's secure as far as I can tell if all blockciphers are secure, but it's very silly.
Apr
8
comment Convert SpookyHash to semi-secure 192bit hash
You can't really trade security against brute-force vs. performance that way. You can reduce the resistance to future cryptoanalysis for a moderate gain in performance by taking a standard crypto hash and reducing the number of rounds to slightly above the best current result.
Apr
8
comment What benefit is there to using AES over my custom cipher for secure storage?
Why would you use any encryption weaker than AES?
Apr
8
comment How exactly does the OpenSSL TLS heartbeat (Heartbleed) exploit work?
While the bug is in a crypto library, it's not a cryptography problem. It's a general security issue and thus fits security.SE better.