8,789 reputation
12041
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 2 years, 9 months
seen yesterday

Nov
7
revised About Elliptic Curve ElGamal, 3 simple problems I have trouble with
edited title
Nov
7
comment Are there any bijective one-way functions not based on number-theoretic hardness assumptions?
@D.W. Some people place a much higher trust in unstructured problems than in highly structured number theoretic problems.
Nov
6
comment Would this program be useful in cryptography?
@user8911 You shouldn't just benchmark multiplication time. Part of key-gen with unknown primes is the primality test. You can't use well known primes like mersenne primes, those could be trivially factored. But just obtaining the key isn't the problem. You actually need to be able to sign/decrypt data with it. Even with karatsuba multiplication that will be pretty expensive. With numbers that size you need to use fancy algorithms, for example a fourier transform based one.
Nov
6
comment Would this program be useful in cryptography?
Have you tried running RSA on that number? By my estimation it'd take about a week for a single private key operation unless you implement advanced multiplication algorithms.
Nov
6
comment What does it mean if second half of 8-char string encrypted in 3DES is always identical?
Is there any reason to believe that it's zero padding and not e.g. PKCS7? I'd expect most paddings to show the same behavior.
Nov
6
reviewed Approve suggested edit on data-privacy tag wiki
Nov
6
reviewed Approve suggested edit on data-privacy tag wiki excerpt
Nov
5
comment Is it true, that non-military cryptography appeared in 50's and 60's only thanks to leaks from the NSA?
It's an influence from secret military crypto/NSA on civilian crypto. Not technically a "leak", but certainly sounds like the kind of thing the OP is interested in.
Nov
5
comment Is it true, that non-military cryptography appeared in 50's and 60's only thanks to leaks from the NSA?
DES was developed by IBM with input from NSA (who at least strengthened it against differential crypto-analysis and reduced the key size). I do not know how big the influence of the NSA on DES was.
Nov
5
reviewed Approve suggested edit on What are monotonic and non monotonic access structures in ABE ?
Nov
5
reviewed Approve suggested edit on Why is $-1$ an illegal message in the Goldwasser-Micali Encryption Scheme
Nov
5
reviewed Approve suggested edit on Generator for Group $QR_{N}$
Nov
4
comment random access stream cipher
There are random access stream ciphers, such as AES-CTR or Salsa20. But they are problematic since they can easily lead to two-time-pads. I think the closest you're going to get is XTS which needs to encrypt a few bytes close to the data you want to read.
Nov
4
comment McEliece Public Key Encryption
Zero is also an acceptable error probability.
Nov
2
comment RSA 896 vs 1024 vs 2048 in Javascript?
Since SSL already blocks most attacks, the gain by using JS crypto on top of that can only be meaningful with keys that even a powerful attacker can't break. At minimum 2048 bit RSA or 224 bit ECC.
Nov
1
reviewed Reject suggested edit on Why does WPA-PSK not use Diffie-Hellman key exchange?
Nov
1
comment How to Distribute the Shares using Secret Sharing for arbitrary Monotone Access Structures
@DrLecter I'm not sure if your edit made the question requirements stricter. The OP might be happy with different weights for each secret holder without being handle the general case.
Nov
1
comment Does ssl_rsa_with_rc4_128_md5 have known weaknesses?
For online banking you only face ordinary criminals and long term security isn't essential either. So this should be fine. But I wouldn't be comfortable with it when security requirements are high. Long term RSA key used for confidentiality => no forward secrecy, possibly too small RSA key and RC4 has known biases.
Nov
1
reviewed Approve suggested edit on What is the recommended replacement for MD5?
Oct
31
revised How to calculate entropy of a combined key
added 39 characters in body