Reputation
14,435
Next tag badge:
102/100 score
17/20 answers
Badges
1 36 76
Newest
 Nice Answer
Impact
~288k people reached

Feb
27
revised Drawback of ElGamal encryption
deleted 8 characters in body
Feb
27
comment Drawback of ElGamal encryption
Upsides compared with (EC)IES style schemes: None for normal encryption. Downsides: 1) Weak security proof (DDH) 2) Annoying to implement, since you need to be able to encode as group elements 3) malleable 4) The limited message size means that you typically still need to implement hybrid encryption.
Feb
27
comment Standard serialization format for libsodium-based messages
I'd simply concatenate nonce and ciphertext.
Feb
21
comment Figure out the encryption being used
If the algorithm doesn't suck, this will be impossible. Reversing the game executable is the most promising path.
Feb
19
revised What is the period of a cipher?
added 6 characters in body
Feb
19
revised What are the computational benefits of primes close to the power of 2?
added 284 characters in body
Feb
19
answered What are the computational benefits of primes close to the power of 2?
Feb
19
revised Can I jettison MAC if I already have SHA1(M)?
added 322 characters in body
Feb
19
revised Idea for secure password hash-likes, is this feasible/usable/workable?
deleted 1 character in body
Feb
19
comment How does BLAKE2 ensure that hash(A) != hash(B) when B = A||0 and both A & B have the same number of blocks?
A draft RFC describing BLAKE2.
Feb
19
revised Good enough deterministic PRNG based on hashes
obsolete due to migration
Feb
17
comment Pseudorandom number generators based on hard problems in mathematics
@poncho There's also "The RSA problem is hard and the hash function used to create the padding is a random oracle".
Feb
17
comment Pseudorandom number generators based on hard problems in mathematics
There is Blum-Blum-Shub, which is related to factoring. But the security proof isn't very tight.
Feb
17
comment Anonymous Gravatar Problem
@fgrieu The idea behind gravatar is associating an image with an email address. So it needs long term email addresses to function properly. A couple of years ago I recovered about 20% of email addresses on stackoverflow by guessing. Others have achieved closer to 50% using a GPU hasher, but on a different dataset.
Feb
16
reviewed Reviewed Decryption of message in IBE without random oracle using bilinear pairing registration?
Feb
16
revised Decryption of message in IBE without random oracle using bilinear pairing registration?
deleted 16 characters in body
Feb
15
comment What is the length field in SHA-512 padding?
Yes, it's the length of the message in bits (without padding).
Feb
15
comment Alternative sources of random numbers
1) You need something secret to seed a CSPRNG. 2) How would you obtain that data? If you download it, and you even trust the source to keep the data secret, you still need enough random data beforehand to initiate a TLS connection. But if you already have a good random seed, why bother with that stuff?
Feb
14
answered Anonymous Gravatar Problem
Feb
14
comment Factoring two RSA modulus with known $|p_1 - p_2| < \ell $
if $p_1=p_2$ you can simply compute the greatest-common-divisor of $N_1$ and $N_2$ to factor them.