Reputation
14,520
Next tag badge:
102/100 score
17/20 answers
Badges
1 36 76
Newest
 Nice Answer
Impact
~289k people reached

Jun
8
reviewed Reviewed Share two secrets between two parties
Jun
8
reviewed No Action Needed Some doubts about GnuPG
Jun
5
revised Is the one-time-pad a secure system according to modern definitions?
edited title
Jun
2
comment Which attacks are possible against raw/textbook elliptic curve?
ECIES corresponds to RSA-KEM, with both you hash the shared secret using a KDF. Typical ECC signatures are similar to RSA-FDH, since in both cases you use a hash as big as the modulus as a number.
Jun
2
revised Is it possible to decrypt this message with partially known data?
deleted 22 characters in body
May
31
comment Why using AES in ECB (Electronic Code Book) mode a bad idea?
There are other parallelizable modes as well. Such as XTS and OCB. But to recommend a mode we need to understand your requirements.
May
31
revised Why using AES in ECB (Electronic Code Book) mode a bad idea?
edited tags
May
30
comment Authenticating small packets
AES CCM might be a better idea than GCM since it only needs one primitive. GCM is usually implemented with relatively big lookup tables, so it's probably not a good fit for your platform.
May
26
comment How to calculate RSA CRT parameters from public key and private exponent
The $\lambda$ in that calculation, isn't necessarily the usual $\lambda(n)$, right? Only a multiple of it.
May
25
comment Using ECB as RSA encryption mode, but encrypted messages are unique
Don't use PKCS#1v1.5 padding, use OAEP.
May
24
comment Are pseudorandom permutation really permutation in mathematical sense?
It's a permutation, but of the $2^{64}$ possible 64 bit blocks, not of the 64 bits within a single block. If a blockcipher were no permutation, you couldn't decrypt a block.
May
24
revised Why does TLS do Authenticate-then-Encrypt instead of Encrypt-then-Authenticate?
added 768 characters in body
May
24
revised Why does TLS do Authenticate-then-Encrypt instead of Encrypt-then-Authenticate?
added 768 characters in body
May
24
answered Why does TLS do Authenticate-then-Encrypt instead of Encrypt-then-Authenticate?
May
23
comment Huffman encoding of hashes
If order doesn't matter, you can sort them and then compress the first few bytes, which rarely change between hashes.
May
21
comment one-way deterministic hash for low entropy input?
Your construction offers no advantage over computing HMAC(key, id) on a trusted device, relying on its rate limiting features and on key being unextractable.
May
19
comment How can a block cipher in counter mode be a reasonable PRNG when it's a PRP?
I wouldn't say that the original version was incorrect, it just didn't mention an important limitation.
May
19
revised How can a block cipher in counter mode be a reasonable PRNG when it's a PRP?
added 1120 characters in body
May
19
revised How can a block cipher in counter mode be a reasonable PRNG when it's a PRP?
added 29 characters in body
May
19
comment How can a block cipher in counter mode be a reasonable PRNG when it's a PRP?
If you like that nitpicky stuff, you might enjoy reading about the "foundations of hashing" problem and why random oracles can't be fully realized using random oracles. Rogaway - Formalizing Human Ignorance, Canetti, Goldreich, Halevi - Random Oracle Methodology, Revisited, Bernstein, Lange - Non-uniform cracks in the concrete, etc.