8,789 reputation
12041
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 2 years, 9 months
seen 21 mins ago

May
15
comment calculating beta for elgamal elliptic curves
I'd use an existing ECC library which offers a scalar multiplication function. But if you implement it yourself you can look at the Explicit-Formulas Database which as addition/doubling formulas for many curve forms.
May
15
comment calculating beta for elgamal elliptic curves
@BobbDizzles You need to look up the point addition and doubling formulas for your curve form.
May
15
comment Generating IV in TLS 1.2
RNGCryptoServiceProvider isn't that slow. It just has a large per-call overhead, so you need to ask for a few kilobytes in a single call. On my notebook it can generate around 4 million IVs (with 16 bytes each) per second on a single core.
May
12
comment Designing a security system from scratch with a custom protocol, suggestions needed
1) Cryptography is all about leaving things to chance, just with really small chances. 2) Adding a MAC is essential. HMAC in a encrypt-then-mac contruction is one good solution, dedicated authenticated encryption like AES-GCM another.
May
11
comment Does SRP reduce to DH key echange when shared password is not secret?
And you don't just need a BigInt library for SRP. If you go that way you will most likely be vulnerable to timing attacks. You need a specialized library that does exponentiation in constant time to do DH or SRP.
May
11
comment Does SRP reduce to DH key echange when shared password is not secret?
Since SRP uses DH as a building block, you need a DH implementation anyways.
May
10
comment Finding hash almost-collisions
I don't get how you go from $2^{52}$ to $2^{26}$, considering this is a near pre-image, not a near collision.
May
10
comment Finding hash almost-collisions
Your math can't be right, $2^{26}$ is far too low to win such a competition. That's less than a CPU minute on a single core. I'd expect them to easily exceed $2^{40}$. I wouldn't be surprised if they managed $2^{51}$ operations with ATI GPUs.
May
10
comment Security of Salsa20 with some known plaintext?
@davidkomer It's essential to use a distinct nonce for every message you encrypt. If you do that, Salsa20 is pretty secure. You should also consider adding authentication, so active attacks are rejected.
May
10
comment Security of Salsa20 with some known plaintext?
@D.W. Salsa20 is a stream cipher. It always uses something similar to CTR mode.
May
9
comment Recommended way of adding a pepper/secret key to password before hashing?
I would encrypt the hash
May
9
reviewed Edit suggested edit on encrypt message with one digest 0-9 instead of 01-26
May
9
revised encrypt message with one digest 0-9 instead of 01-26
fixed capitalization and grammar
May
8
revised Weak One Way Function
added 10 characters in body
May
8
comment Many consecutive hashes to slow down brute force attack?
The entropy loss due to collisions is negligible. Nobody has ever found even a single SHA-256 collision. There is no practical security difference between hashing a salted password multiple times and PBKDF2.
May
7
reviewed Edit suggested edit on What should be the size of a Diffie-Hellman private key?
May
7
revised What should be the size of a Diffie-Hellman private key?
fixed grammar
May
4
revised Is there any strong enough pen-and-paper or mind cipher?
deleted 2 characters in body; edited title
May
2
reviewed Edit suggested edit on Decrypt digital signature using RSA public key with openssl
May
2
revised Decrypt digital signature using RSA public key with openssl
English; formatting