8,799 reputation
12041
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 2 years, 9 months
seen 2 days ago

Oct
1
reviewed Approve suggested edit on ripemd tag wiki excerpt
Oct
1
reviewed Approve suggested edit on ripemd tag wiki
Sep
30
comment Is it possible to create an open-source SecurID?
What prevents public key crypto is that the tokens are so short. As algorithm you could use the standard TOTP
Sep
28
comment understanding pairing $e:G \times G \to G_T$ and ( Decision)BDH assumption
As long as you use a secure pairing friendly curve, it should be secure. Curves with a pairing to a binary field have been seriously weakened recently and should be avoided.
Sep
28
reviewed Satisfactory Relationship between Elliptic Curve Discrete Log, Integer Discrete Log, and Integer Factorization
Sep
28
reviewed Satisfactory Generate Elliptic Curve Private Key from User Passphrase?
Sep
28
reviewed Excellent How relevant are hardware implementations of crypto algorithms?
Sep
28
reviewed Satisfactory Will our app be FIPS 140-2 compliant if we use our own AES algorithm implementation?
Sep
28
reviewed Excellent What criteria make the theta step of Keccak's round function reversible?
Sep
28
reviewed Satisfactory Does the GCM authentication tag need to be protected?
Sep
28
reviewed Satisfactory How to supply the GCM authentication tag to the OpenSSL command line tools?
Sep
28
reviewed Satisfactory Does there exist a two-pass AKE protocol that is secure in eCK model and also has PFS?
Sep
28
reviewed Excellent Is it theoretically possible to construct a string that contain its own hash value?
Sep
28
reviewed Excellent What to watch for with openssl generating weak keys? (low entropy)
Sep
28
comment Is there any implementation of scrypt that allows a specific limit on memory?
@RickyDemer If you run multiple computations in parallel, the memory multiplies with the number of those instances, but if you run them sequentially it does not. You should set the memory parameter so that your total RAM can support all your CPU cores. Once you increase the parallelism parameter beyond your CPU cores, only the runtime increases.
Sep
28
comment How to perform benchmark of block/stream ciphers?
eBACs is a popular benchmarking suite which includes stream ciphers. You should be able to include your own ciphers into it.
Sep
28
revised Why is AES not a Feistel cipher?
deleted 3 characters in body; edited tags; edited title
Sep
27
comment Pre-image resistant but not 2nd pre-image resistant?
There are some hashes with use more rounds for finalization than between consuming inputs. For those it's pretty likely that first pre-images are much harder to find than second pre-images.
Sep
27
comment Why does second pre-image resistance imply pre-image resistance
Their definition of first pre-image resistance seems to be that it's hard for most inputs to find the original input. My pathological example only works for a few inputs.
Sep
27
revised Why does second pre-image resistance imply pre-image resistance
added 436 characters in body