Reputation
12,269
Next tag badge:
90/100 score
20/20 answers
Badges
1 31 61
Newest
 Enlightened
Impact
~211k people reached

Jul
26
comment Show How to Efficiently Solve the Computational Diffie-Hellman Assumption given an Algorithm that Solves the Square-DH Problem
Related problem: Can we reduce Diffie-Hellman problem to “Discrete-log inversion” problem?
Jul
26
answered Why is the whole initial state used in the final addition of Salsa20 and ChaCha?
Jul
24
revised Why is Rabin encryption equivalent to factoring?
edited tags
Jul
22
comment Question about the key in RC4
@lena What's your target hardware? The relative performance of ciphers varies a lot between different CPUs.
Jul
21
awarded  Yearling
Jul
19
comment Why don't use random padding in RSA?
AFAIK what Yehuda described is called RSA KEM. I believe it comes with a pretty strong security proof.
Jul
18
comment How is an epsilon of 1/1000 non-negligible?
1) This question is about what it means for an attacker's advantage to be negligible. Your answer doesn't address that at all. 2) Exploiting a weak PRNG to factor an RSA modulus generated by it isn't related to brute-force. 3) If you're referring to the "many moduli have a prime in common" problem, that was caused by very badly seeded PRNGs outputting identical data of several hundred bits for the first request of random data. This is unrelated to small biases.
Jul
18
comment Why does “2xAES-256” provide “99.99%” security strength whereas “1xAES-128” provides “40%”?
@mikeazo Should I trust CipherCloud? has been closed and deleted. While this question isn't as as non constructive, it still has the "I want to criticize that product but must do it disguised as a question" trait.
Jul
18
comment Why does “2xAES-256” provide “99.99%” security strength whereas “1xAES-128” provides “40%”?
I'm closing this because it's not a genuine question about cryptography. It's a post designed to make fun of ridiculous marketing claims, just phrased as a question. If you enjoy debunking bad crypto, you might want to create a blog, similar to Bruce Schneier's doghouse.
Jul
18
comment Deterministic ECDSA signatures?
@DrLecter The OP wants verifiably deterministic signatures and already linked that RFC.
Jul
17
revised Deterministic ECDSA signatures?
edited body
Jul
17
answered Deterministic ECDSA signatures?
Jul
15
reviewed Reviewed EAX cipher mode with nonce equal header
Jul
15
revised EAX cipher mode with nonce equal header
edited tags
Jul
15
reviewed Reviewed “Order” in cryptographic terms for generators
Jul
15
revised “Order” in cryptographic terms for generators
deleted 30 characters in body
Jul
15
comment Where I can find a list of certified software / hardware RNGs compliant to NIST SP 800-22?
csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm might be relevant.
Jul
15
comment What good is a hash accompanying a program?
Related question on security.se: Does hashing a file from an unsigned website give a false sense of security?
Jul
15
comment Ephemeral Diffie-Hellman in a symmetric crypto context
Does the shared secret have high entropy?
Jul
15
reviewed Close Encrypt with K1, K2 and decrypt in opposite with K2, K1