Reputation
12,198
Next tag badge:
89/100 score
20/20 answers
Badges
1 30 60
Newest
 Yearling
Impact
~205k people reached

Jul
15
revised EAX cipher mode with nonce equal header
edited tags
Jul
15
reviewed Reviewed “Order” in cryptographic terms for generators
Jul
15
revised “Order” in cryptographic terms for generators
deleted 30 characters in body
Jul
15
comment Where I can find a list of certified software / hardware RNGs compliant to NIST SP 800-22?
csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm might be relevant.
Jul
15
comment What good is a hash accompanying a program?
Related question on security.se: Does hashing a file from an unsigned website give a false sense of security?
Jul
15
comment Ephemeral Diffie-Hellman in a symmetric crypto context
Does the shared secret have high entropy?
Jul
15
reviewed Close Encrypt with K1, K2 and decrypt in opposite with K2, K1
Jul
15
comment AES-CBC pre-determined IV vs. null IV
Note that symmetric crypto means that key generators are possible. Using asymmetric keys only cracks but not key generators are possible, but they produce longer product keys.
Jul
14
comment how to implement order preserving encryption except cryptdb
Cryptdb is an implementation, not an algorithm. Are you really looking for an algorithm, or do you want an implementation? AFAIK cryptdb has an accompanying paper describing the algorithms it uses.
Jul
14
comment where to store the salt for “crypto_pwhash” in a web application with no local storage
@mikeazo I think this question would have been fine on crypto.se as well.
Jul
14
comment Why isn't outputting only a portion of the hash state a simple defense against length extension attacks?
That approach is secure. Perhaps there are even some SHA-3 candidates which use this approach, though I can't think of one.
Jul
14
comment Stern identification scheme to signature scheme
Related: Fiat–Shamir heuristic
Jul
14
revised Stern identification scheme to signature scheme
deleted 3 characters in body; edited title; edited tags
Jul
14
comment Massey-Omura three pass protocol prime modulus share
I'd guess that it works like DH in that regard, you can use a shared public modulus, as long as it's big enough. 2048 bits or so.
Jul
13
revised Elligator-2 against curves over Fq, q mod 4 = 3
added 22 characters in body
Jul
13
comment Trying to understand the constant factors (19 and 38) in Ed25519 ref10 function 'fe_mul'
The order of the field is $p=2^{255}-19$. Sometimes it's convenient to reduce modulo $2p = 2^{256}-38$
Jul
12
revised How to compute two EC point multiplication?
deleted 3 characters in body
Jul
12
reviewed Reviewed Differential addition on Montgomery curve
Jul
12
revised Differential addition on Montgomery curve
added 2 characters in body
Jul
12
reviewed Reviewed Which concrete applications benefit from Oblivious RAM constructions?