9,417 reputation
12345
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 3 years
seen 9 hours ago

Oct
21
comment Genuine encryption from only one source?
Does a standard digital signature fit your scenario?
Oct
21
revised Genuine encryption from only one source?
edited tags
Oct
21
revised Salsa20 in Davies-Meyer mode with a fixed key (message): is it one-way?
edited tags
Oct
21
revised What is the PRG period of stream ciphers such as RC4 or Salsa20?
edited tags
Oct
21
revised Security of Salsa20 with some known plaintext?
edited tags
Oct
21
revised Is it safe to assume Salsa20 to be a PRP?
edited tags
Oct
21
revised hardware and software optimizations for Salsa20
edited tags
Oct
21
revised Fast Salsa20 in java?
edited tags
Oct
21
revised Security considerations on “expand 32-byte k”-magic number in the Salsa20 famility of stream ciphers?
edited tags
Oct
21
revised Security considerations on “expand 32-byte k”-magic number in the Salsa20 famility of stream ciphers?
edited title
Oct
21
comment How much is slower GCM AES-128 than one of the stream chipher eSTREAM?
eBACS clearly uses AES-NI on some CPUs for aes128ctr but apparently it does not for aes128estream. On CPUs with AES-NI, it seems to run AES-128 at 1.3 cycles-per-byte, but without it costs over 10 cpb.
Oct
21
revised What's wrong with MARS?
added 4 characters in body; edited tags
Oct
21
comment What's wrong with MARS?
At minimum it's rather ugly.
Oct
21
revised Security considerations on “expand 32-byte k”-magic number in the Salsa20 famility of stream ciphers?
added 426 characters in body
Oct
21
answered Security considerations on “expand 32-byte k”-magic number in the Salsa20 famility of stream ciphers?
Oct
21
reviewed Edit suggested edit on understanding pairing $e:G \times G \to G_T$ and ( Decision)BDH assumption
Oct
21
revised understanding pairing $e:G \times G \to G_T$ and ( Decision)BDH assumption
corrected spelling
Oct
21
comment Security considerations on “expand 32-byte k”-magic number in the Salsa20 famility of stream ciphers?
Choosing all four 32-bit words of the constant as equal is probably a bad idea.
Oct
21
comment Can Secp 256 K1 curves “map” to a value on FIPS 186-3 or P-256?
Conversion works only if the curves are equivalent, but Secp256K1 and P256 are not equivalent.
Oct
18
comment How exactly was the finalist chosen in the NIST AES competition?
Rijndael is actually pretty tricky to implement in software if you want to completely avoid timing side-channels without specialized instructions.