Reputation
Next tag badge:
102/100 score
18/20 answers
Badges
1 36 76
Newest
 Nice Answer
Impact
~290k people reached

Jun
18
reviewed Edit What's the structure of server-key-exchange message during TLS handshake
Jun
18
revised What's the structure of server-key-exchange message during TLS handshake
added 88 characters in body; edited tags
Jun
18
reviewed Leave Open Why can't I use ECB with some obfuscation for transient RAM?
Jun
18
reviewed No Action Needed GPG/PGP Verification of Revocation
Jun
18
reviewed Leave Closed Securely start a client server connection without ssl/tls
Jun
18
reviewed Reviewed What are the differences between collision attack and birthday attack?
Jun
18
revised What are the differences between collision attack and birthday attack?
added 68 characters in body; edited tags
Jun
18
reviewed Reviewed Compromised Issuing CA
Jun
18
wiki
Jun
18
comment How can complexity be increased or decreased in AES?
If this is password based encryption, then there is a natural security-performance tradeoff: The cost of the key-derivation-function can be increased or decreased. For example, bcrypt and PBKDF2 have a number of iterations which can be tuned.
Jun
16
comment SHA512 faster than SHA256?
@MaartenBodewes By the time I remembered that, the 5 min edit limit had expired.
Jun
16
comment SHA512 faster than SHA256?
The crossover point should be at 56 bytes, since SHA256 jumps to 2 blocks of 64 bytes each, at that point. SHA256 might get ahead again at 120 bytes, since then it's 3 blocks for SHA256 and 2 blocks (128 bytes each) for SHA512.
Jun
16
awarded  Caucus
Jun
15
reviewed No Action Needed Why does rsyncrypto require a public key during decryption?
Jun
15
reviewed No Action Needed How to quickly detect incorrect password in encrypted file without compromising security?
Jun
14
comment Should I use ECB or CBC encryption mode for my block cipher?
1) The additional complexity of CBC or CTR is small compared to the complexity of the blockcipher itself. The performance hit is negligible using CTR mode. 2) CBC can be decrypted if you lose data in the middle since each plaintext blocks only depends on two consecutive ciphertext blocks. But it's rarely a good idea to decrypt modified data.
Jun
14
comment Supersingular Isogeny Key Exchange Software
I heard something about 200ms/op for current implementations. Considering how new it is and its mediocre performance, I'd rather use lattice crypto.
Jun
11
comment Cryptanalysis and Copying encrypted volumes
1) modern encryption aims to be immune to known- or even chosen-plaintext attacks. So as long as the crypto is unbroken, known plaintext doesn't matter. 2) truecrypt leaks which 16 byte blocks are identical if you have two containers using the same key.
Jun
11
comment Is DES slow in hardware or only in software?
You might want to expand the blocksize point.
Jun
11
comment Is DES slow in hardware or only in software?
Note that bitsliced DES isn't that slow in software, but you can only use it if you can process multiple blocks in parallel. This is the case for ECB, CTR and CBC decryption, but not CBC encryption. Similar to Why is Serpent faster than AES in this benchmark?