6,155 reputation
1927
bio website github.com/CodesInChaos
location Munich, Germany
age
visits member for 1 year, 11 months
seen 1 hour ago
stats profile views 112

Dec
24
answered Why does Fortuna (RNG) require entropy sources to specify accumulator pool?
Dec
23
comment P-Complete hashes, hashing to a larger set
Combining a hash with an iterated stream cipher should do the trick.
Dec
22
comment Is it safer to generate your own Diffie-Hellman primes or to use those defined in RFC 3526?
Can you recommend some material about deliberately weak $p$,$q$,$g$ sets?
Dec
21
comment Efficient Symmetric Mutual Entity Authentication Protocol
Personally I'd use a normal transport protocol such as SSL and add mutual authentication on top. I think some SSL implementations even support that.
Dec
21
comment Good enough deterministic PRNG based on hashes
@DavidSchwartz IMO this mainly demonstrates why you should use a key only in a single way. This failure is similar to combining CBC encryption with CBC MAC using the same key.
Dec
21
comment AES 128bit round level recommendation
There is an easy way to get 14 rounds with 128 bit blocks: It's called AES-256. Expanding a 128 bit key into a 256 bit key, if you want to do so, is easy.
Dec
21
comment What would the Internet be like without public-key cryptography?
Do you allow hash signatures? You can create a digital signature scheme, using nothing apart from cryptographic hashes.
Dec
20
revised Why is it important that phi(n) is kept a secret, in RSA?
added 5 characters in body
Dec
20
comment Why is it important that phi(n) is kept a secret, in RSA?
@NikBougalis Yes it should. Fixed.
Dec
20
revised Why is it important that phi(n) is kept a secret, in RSA?
added 1 characters in body
Dec
20
revised Why is it important that phi(n) is kept a secret, in RSA?
added 121 characters in body
Dec
20
answered Why is it important that phi(n) is kept a secret, in RSA?
Dec
20
reviewed Approve suggested edit on Double Encrypting with two different keys
Dec
19
answered How many bits of hash are realistically needed for key verification?
Dec
17
answered AES Key Length vs Block Length
Dec
17
answered use the same pad reversed
Dec
17
revised Can the encryption exponent e be greater than ϕ(N)?
added 230 characters in body
Dec
17
answered Can the encryption exponent e be greater than ϕ(N)?
Dec
17
comment Why is h(m||k) insecure?
Related Attacks of the MAC construction H(m||k) for common hashes H?
Dec
16
answered Good enough deterministic PRNG based on hashes