Reputation
12,269
Next tag badge:
90/100 score
20/20 answers
Badges
1 31 61
Newest
 Enlightened
Impact
~212k people reached

Aug
20
comment Recover plaintext from truncated ciphertext using AES for FPE
Read the Feistel network article I linked.
Aug
20
comment Recover plaintext from truncated ciphertext using AES for FPE
You might want to take a look at FFX mode which uses a pretty similar principl.
Aug
20
comment Recover plaintext from truncated ciphertext using AES for FPE
Truncation is not reversible. These truncated values are only used in the Feistel network. The feistel network ensures reversibility even when using a non reversible function.
Aug
20
comment Regular MACs vs Carter-Wegman MAC
WC style MACs need a nonce and leak the key if you ever reuse one.
Aug
20
comment Regular MACs vs Carter-Wegman MAC
AES-GCM is becoming pretty common. Salsa20/ChaChaPoly1305 are are used occasionally as well.
Aug
20
comment A patched SHA1 attempt for password verification
Unsalted SHA-1 is just as crappy a password hash as MD5.
Aug
20
comment A patched SHA1 attempt for password verification
Just send the password in plaintext (over HTTPS/SSL/TLS) to the server and use a proper password hash on the server. It's the job of TLS to protect data in transit, don't try to invent your own crappy hashing scheme instead.
Aug
19
revised How does SafeNet MobilePASS generate passwords?
deleted 32 characters in body
Aug
19
revised How do we compute IV+1 in CTR mode?
edited title
Aug
19
revised GCM vs CTR+HMAC tradeoffs
edited tags
Aug
19
revised Difference between a nonce and IV
edited tags
Aug
19
revised How do we compute IV+1 in CTR mode?
edited tags
Aug
19
revised How to encrypt a file for random access
edited tags
Aug
19
revised How does SafeNet MobilePASS generate passwords?
edited tags
Aug
19
revised How HOTP values are validated according to RFC 4226
edited tags
Aug
19
revised Using HMAC-SHA256 with short passwords and sliced outputs for short-lived secure hashing
edited tags
Aug
19
comment What's the advantage of using OFB/CFB/CTR modes over a stream cipher
CTR has one big advantage: It allows random access
Aug
19
comment Parallel variant of Carter-Wegman MAC with incremental property
You can always interleave several MACs
Aug
13
comment Is it possible to find plaintext from ciphertext if (n) and (a) are known for RSA?
@user3728778 Boneh wrote a paper listing most know attacks on RSA
Aug
13
comment Is it possible to find plaintext from ciphertext if (n) and (a) are known for RSA?
Your claim that these are the easiest way of breaking RSA.