Reputation
11,651
Next tag badge:
97/100 score
18/20 answers
Badges
1 25 57
Newest
 Informed
Impact
~188k people reached

Apr
14
comment Comprehension question on a signature protocol based on the RSA assumption
How about linking the paper?
Apr
14
answered How to use salt if I am sending hashed password?
Apr
13
comment Is there an existing AEAD scheme with minimal IV requirements?
You can in principle describe AES-CBC with encrypted IV + an IV-less MAC (CBC-MAC or HMAC) as an AEAD. I think it'd fulfill your requirements.
Apr
12
comment Pseudo Random Generator (PRG) from Rabin function
Looks like I'll need to look up the details of how to compute the order again. I thought $x^{\lambda(n)}=x \pmod n$ holds.
Apr
12
revised Pseudo Random Generator (PRG) from Rabin function
added 328 characters in body
Apr
12
revised Pseudo Random Generator (PRG) from Rabin function
added 328 characters in body
Apr
12
comment Pseudo Random Generator (PRG) from Rabin function
A better choice of modulus. The product of two large primes (say 512 bits each) should do the job.
Apr
12
answered Pseudo Random Generator (PRG) from Rabin function
Apr
12
comment Pseudo Random Generator (PRG) from Rabin function
Your immediate problem is the unfortunate choice of the modulus.
Apr
12
comment Pseudo Random Generator (PRG) from Rabin function
Might not cause your immediate problem, but should use a BigInteger class instead of Math.Pow and double.
Apr
10
answered AES Message Authentication Vulnerability
Apr
8
comment May the problem with DES using OFB mode be generalized for all feistel ciphers
Your argument only works if reversing the subkeys has no effect.
Apr
8
revised “Weaknesses” in SHA-256d?
edited body
Apr
7
comment How fast can a wrong decryption key be detected using ECC?
Typically ECC is not used for encryption at all. It's only used to determine a symmetric key that's used with a symmetric cipher to do the actual encryption. Your question depends on the choice of the symmetric encryption scheme and on the nature of the plaintext.
Apr
7
revised “Weaknesses” in SHA-256d?
added 1029 characters in body
Apr
7
answered “Weaknesses” in SHA-256d?
Apr
6
comment Does a trace of SSL packets provide a proof of data authenticity?
@SmitJohnth Non handshake data is authenticated with a MAC, so it's symmetric and can't be used to prove who authored that data to a third party.
Mar
27
comment How to choose between AES-CCM and AES-GCM for storage volume encryption
GCM might be a bit faster(depends on CPU), but I don't like it. It feels very fragile.
Mar
26
comment AES ENCRYPTION ALGORITHM
Why are you asking the same question twice?
Mar
26
answered which asymmetric cipher provide highest performance?