Reputation
13,651
Next tag badge:
99/100 score
17/20 answers
Badges
1 34 70
Impact
~261k people reached

Dec
30
revised AES key equal to IV (CBC mode)
added 4 characters in body
Dec
30
comment Why does NaCl's crypto_auth have twice the security level of crypto_onetimeauth?
HMAC can be safely truncated if you want a short auth tag, but I'd avoid truncating Poly1305.
Dec
30
revised AES key equal to IV (CBC mode)
deleted 4 characters in body
Dec
30
answered AES key equal to IV (CBC mode)
Dec
29
comment When/why is RSA (hybrid) encryption used rather than alternatives?
IES is pretty new compared to PGP
Dec
28
revised Do I understand (below) why Q = dP is easy while finding d is hard
edited tags
Dec
28
awarded  Nice Answer
Dec
26
comment Is secp256r1 more secure than secp256k1?
Secp256k1 is over a prime field as well, but has an endomorphism similar to Koblitz curves.
Dec
23
awarded  block-cipher
Dec
23
comment How do I get the equivalent strength of an ECC key?
It might be a good idea to pull out $n$ from the equation, so you end up with something like $\frac{l}{2} - 0.17$.
Dec
23
comment What is the best current way to cryptographically secure databases?
What kind of API should the server offer to clients? Do clients download a copy of the database and perform operations locally, with the server only helping with synchronization?
Dec
19
comment Secure, patent-free alternative to NTRU
If you like big keys, McEliece is an option.
Dec
19
comment Homogenous and heterogeneous Unbalanced Feistel Networks
Related: slide attack
Dec
18
comment What is the shortest fingerprint of a Curve25519 public key that is secure
Note that it might be possible to use a short-authentication-string (SAS) instead of a fingerprint. Since those are not vulnerable to offline attacks, they can be much shorter.
Dec
18
comment ElGamal with elliptic curves
How would your $m=x$ technique work, considering only half of the possible $x$ values are on the curve?
Dec
17
comment Lightweight Asymmetric encryption algorithm
@JoeBebel Ed25519 key generation is fast, but by far not as fast as a CSPRNG.
Dec
17
comment Efficient way to confirm identity
You'd use a handshake based on asymmetric crypto and then a MAC for all further messages. I strongly recommend using existing protocols, like TLS, DTLS or CurveCP for this.
Dec
16
comment Symmetric encryption algorithms with large IVs and authentication?
You could simply use XSalsa20Poly1305, which is authenticated encryption with a 192 bit IV.
Dec
16
comment Symmetric encryption algorithms with large IVs and authentication?
XSalsa20/XChaCha20 have a large enough IV.
Dec
16
comment Combining a block cipher with a (pseudo) OTP
"The algorithm is built on the fact that each and every ciphertext bit is required to decrypt, or even break, a block cipher encryption." Why do you believe that?