Reputation
392
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 2 16
Newest
 Curious
Impact
~25k people reached

  • 0 posts edited
  • 1 helpful flag
  • 8 votes cast
Jan
31
comment Exactly how bad is using 'mod' to clamp reduce numbers to a given range?
@RickyDemer: Yeah that factor of 2 is precisely what I was referring to. Your point about the stream cipher could be a good answer if you'd like to write one.
Jan
31
comment Exactly how bad is using 'mod' to clamp reduce numbers to a given range?
@RickyDemer: Yeah so that's already way less than the one-half I talked about (I think that's the max too? I didn't really think about it). My question stands exactly as-is: why is that a real problem for a system that is otherwise designed to be secure? Who cares if the attacker saves 1/6 of his time?
Jan
31
comment Exactly how bad is using 'mod' to clamp reduce numbers to a given range?
@RickyDemer: Can you elaborate? Give me an example? Pretend I'm dumb. That tells me nothing about your thought process.
Jan
31
comment Exactly how bad is using 'mod' to clamp reduce numbers to a given range?
To add to what @RickyDemer said, aren't current cryptographic systems far more difficult to crack than by a factor of 2? What's the problem here?
Jan
30
comment Exactly how bad is using 'mod' to clamp reduce numbers to a given range?
@those who migrated this question: I wasn't just talking about crypto though... imagine an attacker trying to DDoS a service by making it execute worst-case behavior on a hashtable. Or whatever.
Jan
16
comment Are there any advantages in using proprietary encryption?
@CodesInChaos: My answer applies to both cases though, doesn't it?
Nov
28
comment Cryptographically secure keyed rolling hash function
Wow, I feel so dumb after reading this answer. Thanks for writing this!
Jun
12
comment What's the fundamental difference between Diffie-Hellman and RSA?
@B-Con: Actually, it misses the precise point I was trying to make with this post. :) Notice the word "mathematical" in the title -- that was specifically not the real goal of my question/answer here, because I already knew that they're different mathematically (they're different algorithms, after all). :P (See my comment on my answer below.)
Jun
11
comment What's the fundamental difference between Diffie-Hellman and RSA?
@PaĆ­loEbermann: That's definitely a valid answer to the question -- but the issue was that I had a harder time coming up with the question than the answer haha, since wasn't looking for the mathematical difference so much as the nature of their difference. I was looking for someone to explain this^ concept, so when I found it out myself I just wrote a question for it so I could write the answer too. :) If you can think of a better way to phrase the question to match the answer then I'd love to know!
Jun
4
comment Is RSA in a ECB-like-mode safe for bulk encryption?
@fgrieu: Just because it was a handy scheme... I don't really mind that part if it's different though.
Jun
4
comment Is RSA in a ECB-like-mode safe for bulk encryption?
Oh dang, ok thanks. :)
Jun
4
comment Is RSA in a ECB-like-mode safe for bulk encryption?
+1 thanks for the explanation. Just a question: do you happen to know any ballpark numbers on just how inefficient a scheme like RSA is? (e.g. in KB/s or something, or how many times slower than symmetric encryption, for a typical-sized key.) Just as a rule of thumb -- anything within an order of magnitude is great.
Jun
4
comment Is RSA in a ECB-like-mode safe for bulk encryption?
@CodeInChaos: It's just an encryption question -- I'm not worried about a per message overhead (as long as it's fixed), and I haven't worried about authenticity yet (I don't think signing would be a problem here). I'm just asking about the encryption part for now.
Jun
4
comment Is RSA in a ECB-like-mode safe for bulk encryption?
I don't understand what you mean by "re-using the private key". Isn't the private key, well, private? How do you 're-use' a private key?
May
10
comment How can disk encryption systems (like Truecrypt) resist frequency analysis when they allow random access?
@Ninefingers: Thanks for the edit!
May
10
comment How can disk encryption systems (like Truecrypt) resist frequency analysis when they allow random access?
Awesome answer, it fully answers my question! Thanks! :)