meta user
network profile
| bio | website | github.com/CodesInChaos |
|---|---|---|
| location | Munich, Germany | |
| age | ||
| visits | member for | 1 year, 10 months |
| seen | 1 hour ago | |
| stats | profile views | 109 |
- Jabber/XMPP: CodeInChaos@jabber.ccc.de
- IRC: CodesInChaos on freenode
- Email: My nick on gmail
- Blog: codesinchaos.wordpress.com
- GitHub: github.com/CodesInChaos
- Google+
- Twitter @CodesInChaos
|
Oct 7 |
asked | Why does Skein use an output transform, but other similar hashes don't? |
|
Oct 5 |
reviewed | Approve suggested edit on Is it safe to use file's hash as IV? |
|
Oct 3 |
revised |
Is 512-bit RSA still safe for signature generation? formatting |
|
Sep 22 |
comment |
Why is there a strong distinction between stream and block ciphers? @Mok-KongShen No he didn't. The only advantage a dedicated stream cipher has over a block cipher in an appropriate mode is performance. You can't disregard chaining modes, since nobody sane uses block ciphers without appropriate chaining. |
|
Sep 22 |
revised |
Why is there a strong distinction between stream and block ciphers? deleted 6 characters in body |
|
Sep 22 |
revised |
Why is there a strong distinction between stream and block ciphers? added 10 characters in body |
|
Sep 22 |
comment |
Why is there a strong distinction between stream and block ciphers? As for your own cipher, why do you think a cipher that's 10000 times as slow as AES is acceptable? There are dozens of open source implementations of AES, so your "commercial proprietary (black-box) IT-security software, which generally have very excellent computing efficiency but which are absolutely unknown (since by definition un-knowable) of being free or not of dormant backdoors implanted by mafias or malicious agencies of certain mighty pseudo-righteous pseudo-humanitarian pseudo-peace-loving pseudo-democratic regimes of the world" argument certainly doesn't apply to AES. |
|
Sep 22 |
comment |
Why is there a strong distinction between stream and block ciphers? "in the first case the dynamics or variability" What's that supposed to mean? |
|
Sep 22 |
answered | Why is there a strong distinction between stream and block ciphers? |
|
Sep 21 |
awarded | Custodian |
|
Sep 21 |
revised |
SHA-256 and AES-128 added 1 characters in body |
|
Sep 21 |
answered | SHA-256 and AES-128 |
|
Sep 21 |
comment |
SHA-256 and AES-128 Do you want to use a password, or a random key? Turning passwords into keys has some extra requirements. You should not just send it through SHA-256 or put it directly into the key. |
|
Sep 19 |
comment |
Why do public keys need to be validated? I wasn't considering your first attack, because I forgot that many protocols don't use compressed points. I was only considering checks of points which result from decompression, and thus are on the curve. Such as checking that $ qY=0 $. I'll need to reread some papers, to check if some of the attacks I read about assume points not on the curve. At least some checks seem to be curve specific, since the Curve25519 paper mentions choosing parameters so that any compressed point can be used without validation. |
|
Sep 19 |
comment |
Shortcuts / practicality of brute forcing block cipher (AES) + ECB with known plaintext "ECB mode[...] does not suffer from them." Are you sure? I'd expect ECB to have the same padding issues. ECB needs the same kind of padding as CBC, and transforms blocks in pretty much the same way. I see no difference between them in that regard. |
|
Sep 19 |
comment |
Data-validating protocol You did not say what kind of access Bob as to $M$. And what's TTP? |
|
Sep 18 |
revised |
Why do public keys need to be validated? deleted 2 characters in body |
|
Sep 18 |
asked | Why do public keys need to be validated? |
|
Sep 16 |
revised |
Dimension of Encryption of a linearly dependent set of plaintexts improved formatting |
|
Sep 14 |
revised |
BouncyCastle Elliptic Curve implementation deleted 64 characters in body |
