Reputation
14,430
Next tag badge:
102/100 score
17/20 answers
Badges
1 36 76
Newest
 Nice Answer
Impact
~288k people reached

Jun
19
revised Does this chat protocol exist?
added 44 characters in body
Jun
19
comment Relationship between an elements order and the DLP
Related question: Solving discrete logarithm when p is not a safe prime
Jun
19
reviewed Leave Open Relationship between an elements order and the DLP
Jun
19
comment Relationship between an elements order and the DLP
We don't have a good question about small subgroup attacks and IMO we should have one. But I'm not sure if we should use this one (edited if necessary), or if we should create a well written canonical question, and close this one as duplicate of it.
Jun
19
comment In which situations is a length-extension attack a problem?
Similar multi collision attacks apply to all narrow pipe hashes, since for them, finding a state collision isn't harder than finding an output collision.
Jun
19
accepted Why use $(r,s)$ instead of $(r,s^{-1})$ as DSA signature?
Jun
18
awarded  Revival
Jun
18
answered Why can't I use ECB with some obfuscation for transient RAM?
Jun
18
reviewed Edit What's the structure of server-key-exchange message during TLS handshake
Jun
18
revised What's the structure of server-key-exchange message during TLS handshake
added 88 characters in body; edited tags
Jun
18
reviewed Leave Open Why can't I use ECB with some obfuscation for transient RAM?
Jun
18
reviewed No Action Needed GPG/PGP Verification of Revocation
Jun
18
reviewed Leave Closed Securely start a client server connection without ssl/tls
Jun
18
reviewed Reviewed What are the differences between collision attack and birthday attack?
Jun
18
revised What are the differences between collision attack and birthday attack?
added 68 characters in body; edited tags
Jun
18
reviewed Reviewed Compromised Issuing CA
Jun
18
wiki
Jun
18
comment How can complexity be increased or decreased in AES?
If this is password based encryption, then there is a natural security-performance tradeoff: The cost of the key-derivation-function can be increased or decreased. For example, bcrypt and PBKDF2 have a number of iterations which can be tuned.
Jun
16
comment SHA512 faster than SHA256?
@MaartenBodewes By the time I remembered that, the 5 min edit limit had expired.
Jun
16
comment SHA512 faster than SHA256?
The crossover point should be at 56 bytes, since SHA256 jumps to 2 blocks of 64 bytes each, at that point. SHA256 might get ahead again at 120 bytes, since then it's 3 blocks for SHA256 and 2 blocks (128 bytes each) for SHA512.