Reputation
14,570
Next tag badge:
102/100 score
17/20 answers
Badges
1 36 76
Newest
 Nice Answer
Impact
~290k people reached

Jun
29
revised Understanding elliptic curve encryption
added 39 characters in body; edited tags
Jun
29
comment Security of this deterministic encryption scheme
Implementing this scheme without a padding oracle isn't trivial, unless the MACed plaintext is already padded.
Jun
29
answered Adding tweak to a block cipher
Jun
29
comment Extracting a WinRAR password
I can't say for sure without having looked at the winrar crypto in detail, but I consider it pretty unlikely since it'd require an unusually dumb mistake. Probably the best you can do is running a program that tests many password candidates, but that's only feasible for simple passwords.
Jun
29
comment Extracting a WinRAR password
Known plaintext attacks don't work against modern ciphers.
Jun
29
comment Block Ciphers - Standardize plain text
@AlexRibeiro CTR produces the key stream by encrypting a sequence of counters. While you compute a key stream consisting of full blocks, you can simply discard the useless final bytes. CTR can do that, since it doesn't pass the ciphertext blocks to the blockcipher when decrypting, instead passing the same counters as when encrypting.
Jun
29
answered Forgery attack on OCB
Jun
29
reviewed Looks OK Forgery attack on OCB
Jun
29
reviewed No Action Needed HMAC-SHA1( secret key ) with header of a transmitted file
Jun
29
comment Bouncy Castle and Salsa 20
I'm voting to close this question as off-topic because it is a programming problem, not a cryptography problem.
Jun
29
comment How does bitmessage encryption work?
Since somebody creating two public keys with the same address doesn't look like a relevant attack, this only relies on (multi-target) second pre-image resistance, not collision resistance. 160 bits is plenty for that.
Jun
28
revised How can a Vigenère cipher be broken if the message is short?
edited tags
Jun
28
revised Relative security of a Vigenère cipher
edited tags
Jun
28
revised Assuming a 1024qb quantum computer, how long to brute force 1024bit RSA, 256bit AES and 512bit SHA512
deleted 10 characters in body; edited tags
Jun
28
revised Proof for the SHA3 claim that 256 bit security is “post-quantum sufficient”?
edited tags
Jun
28
revised How long does it take a quantum computer to brute force AES?
edited tags
Jun
28
revised Implementations of Ntru TLS
edited tags
Jun
28
revised Now that quantum computers have been out for a while, has RSA been cracked?
edited tags
Jun
28
reviewed Close Use curve25519 for ElGamal crypto
Jun
28
reviewed Close Less known hash functions producing 128 bit hash