9,417 reputation
12345
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 3 years
seen 3 hours ago

8h
comment AES CTR rekeys rapidly, does this produce patterns?
In your codeproject article you claim that this benerator is better than existing ones. Can you describe any advantages over the generator part of fortuna? It's based on AES-CTR, but is much simpler than yours.
1d
comment AES CTR rekeys rapidly, does this produce patterns?
I guess that NextInt32(2) takes several seconds for each value. That counts as "slow as hell" as far as I'm concerned.
1d
comment AES CTR rekeys rapidly, does this produce patterns?
At minimum, your algorithm is ugly, overly complicated and slow as hell.
1d
comment AES CTR rekeys rapidly, does this produce patterns?
Please include a deacription of your algorithm in your question, it should be able to stand on its own.
Jul
17
comment Are there any reasons for using SSL over IPSec?
I think this fits security.se betterthan crypto. @mikeazo can you talk to the sec.se mods and possibly migrate?
Jul
14
comment Is there any reason for encryption to be as fast as possible?
Is there a reason for encryption to be slow?
Jul
12
comment McEliece and cryptanalysis
I'd expect grover to be applicable to some degree.
Jul
9
comment Is calculating a hash code for a large file in parallel less secure than doing it sequentially?
Note that Merkle-Damgard has a similar loss of second pre-image security, so compared to SHA-2 the security loss is only due to the additional compressions the tree adds, which should account for less than a bit. The workarounds are pretty similar too, either add unique node tagging or use a wide-pipe.
Jul
8
comment What exactly does a key do?
If you have an $b$ bit key, there are $2^b$ possibilities. The base 2 logarithm $\log_2$ is the inverse of the exponential function $2^x$. So with 26 possible keys, you get $\log_2{26} \approx 4.7$ or equivalently $2^{4.7} \approx 26$.
Jul
8
comment What exactly does a key do?
In that sample you could consider "Shift by $x$" the algorithm (Caesar encryption) and $x=2$ the key. This would be a $\log_2{26}\approx4.7$ bit key.
Jul
6
comment Convergent encryption has dictionary attack, but why hash function doesn't?
Sending the hash of the plaintext suffers from the same problems as convergent encryption. The best writeup of the security properties of CE I've seen so far is zooko's Drew Perttula and Attacks on Convergent Encryption
Jul
4
comment Use ElGamal to solve Diffie-Hellman problem
AFAIK ElGamal only reduces to the decisional DH problem, not the the computational DH problem. So this proof shouldn't exist
Jul
1
comment Types of cryptography
You should read Structure vs. Combinatorics in Computational Complexity
Jul
1
comment Types of cryptography
The underlying problem is called AES. Typical symmetrical schemes don't reduce to an elegant mathematical problem. They rely on the complexity emerging out of the interaction of many simple operations. In a way RSA/DH etc. are structured whereas AES is unstructured.
Jun
30
comment Combining Random Hashes - avoiding collisions and ensuring randomness
@Navonod SipHash has been designed with a uniformly random key in mind, so you're not using it as intended. But since your requirements are much weaker than what it's designed to offer, that might still be okay for you.
Jun
30
comment Does collision resistance imply (or not) second-preimage resistance?
If you have a two block message you can run a meet-in-the-middle attack since the primitive function is invertible. This should break (second) preimage resistance with cost $2^{c/2}$ where $c$ is the capacity. (I didn't look into the memory requirements, they might be unrealistically large) This is the reason why SHA-3 uses $c=2 n$.
Jun
28
comment Does collision resistance imply (or not) second-preimage resistance?
A sponge with capacity $n$ is another example. This one is important since NIST considered having SHA-3 with only $2^{n/2}$ preimage resistance.
Jun
28
comment Does collision resistance imply (or not) second-preimage resistance?
The only thing I can think of is that we usually expect $2^n$ second pre-image resistance, whereas collision resistance is limited to $2^{n/2}$. So from collision resistance we can only prove $2^{n/2}$ second preimage resistance, not the stronger bound we'd like.
Jun
28
comment Does collision resistance imply (or not) second-preimage resistance?
Please provide a link to the claim that there are collision resistant but not second-preimage resistant hashes.
Jun
26
comment Combining Random Hashes - avoiding collisions and ensuring randomness
You should write a bit more about the problem you want to solve. What your inputs are, what the outputs should be. What you want to guarantee etc. Your answer is mostly about the problems you encountered with your approach. I suspect that the best solution throws most of that approach away, replacing it by a single standard crypto function.