9,442 reputation
12245
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 2 years, 11 months
seen 2 days ago

Sep
28
reviewed Satisfactory Does the GCM authentication tag need to be protected?
Sep
28
reviewed Satisfactory How to supply the GCM authentication tag to the OpenSSL command line tools?
Sep
28
reviewed Satisfactory Does there exist a two-pass AKE protocol that is secure in eCK model and also has PFS?
Sep
28
reviewed Excellent Is it theoretically possible to construct a string that contain its own hash value?
Sep
28
reviewed Excellent What to watch for with openssl generating weak keys? (low entropy)
Sep
28
comment Is there any implementation of scrypt that allows a specific limit on memory?
@RickyDemer If you run multiple computations in parallel, the memory multiplies with the number of those instances, but if you run them sequentially it does not. You should set the memory parameter so that your total RAM can support all your CPU cores. Once you increase the parallelism parameter beyond your CPU cores, only the runtime increases.
Sep
28
comment How to perform benchmark of block/stream ciphers?
eBACs is a popular benchmarking suite which includes stream ciphers. You should be able to include your own ciphers into it.
Sep
28
revised Why is AES not a Feistel cipher?
deleted 3 characters in body; edited tags; edited title
Sep
27
comment Pre-image resistant but not 2nd pre-image resistant?
There are some hashes with use more rounds for finalization than between consuming inputs. For those it's pretty likely that first pre-images are much harder to find than second pre-images.
Sep
27
comment Why does second pre-image resistance imply pre-image resistance
Their definition of first pre-image resistance seems to be that it's hard for most inputs to find the original input. My pathological example only works for a few inputs.
Sep
27
revised Why does second pre-image resistance imply pre-image resistance
added 436 characters in body
Sep
27
comment Why does second pre-image resistance imply pre-image resistance
hmm I can't think of a way that gives an n bit hashfunction n bit second pre-image resistance without giving it n bit first pre-image resistance. Perhaps their definition has some additional constraints.
Sep
27
comment Why does second pre-image resistance imply pre-image resistance
For example consider the pathological 512 hashfunction that concatenates the first 256 bits of the input with the output of a a secure 256 bit hashfunction. This isn't first pre-image resistant, but has 256 bits of second pre-image resistance.
Sep
27
comment Why does second pre-image resistance imply pre-image resistance
It doesn't. So where did you find that claim?
Sep
27
comment Shamir's Secret Share
A computer can't represent real numbers
Sep
26
comment Is modern encryption needlessly complicated?
You seem to have a weird definition of "full understanding". IMO even its designers don't come anywhere close to fully understanding it. For example for basic understanding AES s-boxes, you need to understand binary finite fields. You need to understand how differential works, why there are no simple formulas that can solve AES for the key,... Even basic understanding of AES requires a lot of study. As a practical example consider the NSA tweak to DES. Cryptographers needed decades to understand that simple tweak. If you don't understand the consequences of that tweak, you don't understand DES
Sep
26
comment Using Whirlpool hashing function to encrypt data
Or you could simple undo the feed-forward. That way you directly get a block-cipher. No need for a Feistel network.
Sep
26
awarded  Civic Duty
Sep
25
comment Algorithm for sharing secret information with redundant keys
A common choice is Shamir's Secret Sharing
Sep
25
comment Is there a developer's resource that ties encryption methods and strengths to the appropriate usage scenarios?
For the password part, see How to securely hash passwords? on security.SE