9,586 reputation
12347
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 3 years, 1 month
seen 1 hour ago

Nov
6
comment What does it mean if second half of 8-char string encrypted in 3DES is always identical?
Is there any reason to believe that it's zero padding and not e.g. PKCS7? I'd expect most paddings to show the same behavior.
Nov
6
reviewed Approve suggested edit on data-privacy tag wiki
Nov
6
reviewed Approve suggested edit on data-privacy tag wiki excerpt
Nov
5
comment Is it true, that non-military cryptography appeared in 50's and 60's only thanks to leaks from the NSA?
It's an influence from secret military crypto/NSA on civilian crypto. Not technically a "leak", but certainly sounds like the kind of thing the OP is interested in.
Nov
5
comment Is it true, that non-military cryptography appeared in 50's and 60's only thanks to leaks from the NSA?
DES was developed by IBM with input from NSA (who at least strengthened it against differential crypto-analysis and reduced the key size). I do not know how big the influence of the NSA on DES was.
Nov
5
reviewed Approve suggested edit on What are monotonic and non monotonic access structures in ABE ?
Nov
5
reviewed Approve suggested edit on Why is $-1$ an illegal message in the Goldwasser-Micali Encryption Scheme
Nov
5
reviewed Approve suggested edit on Generator for Group $QR_{N}$
Nov
4
comment random access stream cipher
There are random access stream ciphers, such as AES-CTR or Salsa20. But they are problematic since they can easily lead to two-time-pads. I think the closest you're going to get is XTS which needs to encrypt a few bytes close to the data you want to read.
Nov
4
comment McEliece Public Key Encryption
Zero is also an acceptable error probability.
Nov
2
comment RSA 896 vs 1024 vs 2048 in Javascript?
Since SSL already blocks most attacks, the gain by using JS crypto on top of that can only be meaningful with keys that even a powerful attacker can't break. At minimum 2048 bit RSA or 224 bit ECC.
Nov
1
reviewed Reject suggested edit on Why does WPA-PSK not use Diffie-Hellman key exchange?
Nov
1
comment How to Distribute the Shares using Secret Sharing for arbitrary Monotone Access Structures
@DrLecter I'm not sure if your edit made the question requirements stricter. The OP might be happy with different weights for each secret holder without being handle the general case.
Nov
1
comment Does ssl_rsa_with_rc4_128_md5 have known weaknesses?
For online banking you only face ordinary criminals and long term security isn't essential either. So this should be fine. But I wouldn't be comfortable with it when security requirements are high. Long term RSA key used for confidentiality => no forward secrecy, possibly too small RSA key and RC4 has known biases.
Nov
1
reviewed Approve suggested edit on What is the recommended replacement for MD5?
Oct
31
revised How to calculate entropy of a combined key
added 39 characters in body
Oct
31
reviewed Approve suggested edit on monotone-access-structure tag wiki excerpt
Oct
31
answered How to calculate entropy of a combined key
Oct
31
reviewed Approve suggested edit on How to calculate entropy of a combined key
Oct
31
reviewed Approve suggested edit on How are IVs used in association with RSA Encryption?