Reputation
13,641
Next tag badge:
99/100 score
17/20 answers
Badges
1 34 70
Impact
~260k people reached

Jun
15
reviewed No Action Needed How to quickly detect incorrect password in encrypted file without compromising security?
Jun
14
comment Should I use ECB or CBC encryption mode for my block cipher?
1) The additional complexity of CBC or CTR is small compared to the complexity of the blockcipher itself. The performance hit is negligible using CTR mode. 2) CBC can be decrypted if you lose data in the middle since each plaintext blocks only depends on two consecutive ciphertext blocks. But it's rarely a good idea to decrypt modified data.
Jun
14
comment Supersingular Isogeny Key Exchange Software
I heard something about 200ms/op for current implementations. Considering how new it is and its mediocre performance, I'd rather use lattice crypto.
Jun
11
comment Cryptanalysis and Copying encrypted volumes
1) modern encryption aims to be immune to known- or even chosen-plaintext attacks. So as long as the crypto is unbroken, known plaintext doesn't matter. 2) truecrypt leaks which 16 byte blocks are identical if you have two containers using the same key.
Jun
11
comment Is DES slow in hardware or only in software?
You might want to expand the blocksize point.
Jun
11
comment Is DES slow in hardware or only in software?
Note that bitsliced DES isn't that slow in software, but you can only use it if you can process multiple blocks in parallel. This is the case for ECB, CTR and CBC decryption, but not CBC encryption. Similar to Why is Serpent faster than AES in this benchmark?
Jun
8
revised Is randomsound for increasing entropy pool not doing what it is supposed to do?
added 53 characters in body
Jun
8
revised Are there security issues with adding plaintext length to TLS packets?
edited body; edited title
Jun
8
revised Is there a cryptographic algorithm which is immune to side channel attacks?
edited title
Jun
8
reviewed Reviewed Converting ECC Code from python to Java. Extended Euclidean Algorithm not working.
Jun
8
comment Converting ECC Code from python to Java. Extended Euclidean Algorithm not working.
Python carries out the tuple assignment at the same time, your java assignments happen sequentially. This means lm and low already have their new values when you assign them to hm and high, whereas in python they still have the old value.
Jun
8
comment Converting ECC Code from python to Java. Extended Euclidean Algorithm not working.
I'm voting to close this question as off-topic because it is a programming problem.
Jun
8
revised Is there a cryptographic algorithm which is immune to side channel attacks?
edited tags
Jun
8
reviewed Reviewed Share two secrets between two parties
Jun
8
reviewed No Action Needed Some doubts about GnuPG
Jun
5
revised Is the one-time-pad a secure system according to modern definitions?
edited title
Jun
2
comment Which attacks are possible against raw/textbook elliptic curve?
ECIES corresponds to RSA-KEM, with both you hash the shared secret using a KDF. Typical ECC signatures are similar to RSA-FDH, since in both cases you use a hash as big as the modulus as a number.
Jun
2
revised Is it possible to decrypt this message with partially known data?
deleted 22 characters in body
May
31
comment Why using AES in ECB (Electronic Code Book) mode a bad idea?
There are other parallelizable modes as well. Such as XTS and OCB. But to recommend a mode we need to understand your requirements.
May
31
revised Why using AES in ECB (Electronic Code Book) mode a bad idea?
edited tags