10,257 reputation
12452
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 3 years, 5 months
seen 1 hour ago

Oct
1
comment Why are cryptography algorithms not exported to certain countries?
1) It's just politicians being behind the times. Of course copying open source crypto is trivial for those countries. 2) For most algorithms it's extremely unlikely that they were backdoored 3) Writing your own implementation is risky. Most crypto code I've seen is broken, even when it builds on standard primitives like AES.
Oct
1
comment Hybrid encryption with RSA and AES versus spliting into multiple RSA messages?
@Markus I don't understand what you're doing, but it's probably a bad idea.
Oct
1
comment Hybrid encryption with RSA and AES versus spliting into multiple RSA messages?
Don't forget to include a MAC, else active attacks will break your scheme. Personally I'd go with NaCl's box operation instead of building my own hybrid encryption scheme.
Oct
1
reviewed Approve ripemd tag wiki excerpt
Oct
1
reviewed Approve ripemd tag wiki
Sep
30
comment Is it possible to create an open-source SecurID?
What prevents public key crypto is that the tokens are so short. As algorithm you could use the standard TOTP
Sep
28
comment understanding pairing $e:G \times G \to G_T$ and ( Decision)BDH assumption
As long as you use a secure pairing friendly curve, it should be secure. Curves with a pairing to a binary field have been seriously weakened recently and should be avoided.
Sep
28
reviewed Satisfactory Relationship between Elliptic Curve Discrete Log, Integer Discrete Log, and Integer Factorization
Sep
28
reviewed Satisfactory Generate Elliptic Curve Private Key from User Passphrase?
Sep
28
reviewed Excellent How relevant are hardware implementations of crypto algorithms?
Sep
28
reviewed Satisfactory Will our app be FIPS 140-2 compliant if we use our own AES algorithm implementation?
Sep
28
reviewed Excellent What criteria make the theta step of Keccak's round function reversible?
Sep
28
reviewed Satisfactory Does the GCM authentication tag need to be protected?
Sep
28
reviewed Satisfactory How to supply the GCM authentication tag to the OpenSSL command line tools?
Sep
28
reviewed Satisfactory Does there exist a two-pass AKE protocol that is secure in eCK model and also has PFS?
Sep
28
reviewed Excellent Is it theoretically possible to construct a string that contain its own hash value?
Sep
28
reviewed Excellent What to watch for with openssl generating weak keys? (low entropy)
Sep
28
comment Is there any implementation of scrypt that allows a specific limit on memory?
@RickyDemer If you run multiple computations in parallel, the memory multiplies with the number of those instances, but if you run them sequentially it does not. You should set the memory parameter so that your total RAM can support all your CPU cores. Once you increase the parallelism parameter beyond your CPU cores, only the runtime increases.
Sep
28
comment How to perform benchmark of block/stream ciphers?
eBACs is a popular benchmarking suite which includes stream ciphers. You should be able to include your own ciphers into it.
Sep
28
revised Why is AES not a Feistel cipher?
deleted 3 characters in body; edited tags; edited title