2,140 reputation
21030
bio website stackexchange.com/users/…
location
age
visits member for 3 years
seen 17 mins ago

Moderator♦ pro tempore on French Language, Computer Science and Software Recommendations. I'm also a unix amateur, and a developer with a computer science background and security leanings by trade.

Interested in embedded systems? Join the Embedded Programming and Design proposal!

Programmeurs francophones : participez à Stack Overflow en français.

Avatar picture slightly adapted from a photo by Luridiformis (Zonda Grattus).


23h
reviewed Reviewed Is Curve25519-java secure?
23h
comment Simple proof that shows AES is not a uniform permutation on any n-bit string?
@D.W. While this thread is surely related, I don't understand how it answers this question. What does it mean for a specific permutation to be uniform anyway?
23h
comment Unknown compression algorithm
The folks at Reverse Engineering could help. But you don't give much to go on. Can you post some sample (plain, encoded) pairs? Are you sure that it's compressed — compressed data shouldn't have bytes that are markedly more frequent than others, but I suppose this could be a really crappy home-made compression algorithm?
23h
reviewed Close Unknown compression algorithm
1d
reviewed No Action Needed How to encrypt a file for random access
1d
reviewed Close GPG vs PGP vs OpenSSH and management of them
1d
reviewed Close Strengthening security of an encrypted file against forensic detection
1d
comment Strengthening security of an encrypted file against forensic detection
Practically speaking, this question is useless. Your scheme gives no additional security: the adversary will just say “yup, probably encrypted” when they see the random-looking data, and “yup, probably TrueCrypt” because that's a widely-used tool. To secure your data, use a good, vetted tool (such as TrueCrypt) and a strong password (random, with an amount of entropy you're happy with). If you want to hide that your data is encrypted, you're barking up the wrong tree; what you need is steganography (hide your data in pictures/sound/video) — or less paranoia.
1d
comment Strengthening security of an encrypted file against forensic detection
There is a cryptography question in there: the added workload required for an adversary to reverse steps 1 and 2. However these steps are not described precisely enough to answer the question: how is the split size chosen? How does step 3 know what pieces to reassemble and in what order? If you describe step 3 precisely, instead of handwaving, then the effectiveness calculation should follow easily.
1d
reviewed Close What algorithm is used for 1024 bit hash which appears on 56th page of Cicada puzzle runes?
1d
reviewed Close Keep GPG revocation certificate in safe place?
1d
reviewed Leave Open How dead is braid based cryptography
1d
reviewed Close Big crunch, the Data way?
Aug
16
revised How to perform authentication without central server in P2P?
removed bogus line breaks
Aug
16
comment Security implication of exporting private key
This question appears to be off-topic because it is about tools that happens to be using cryptography, not about the underlying cryptography itself. Since it is about the security properties of these tools, it would be best on Information Security.
Aug
16
awarded  Cleanup
Aug
16
revised Security implication of exporting private key
removed bogus line breaks
Aug
16
revised Luby-Rackoff theorem confusion
removed bogus line breaks
Aug
16
revised A problem about zero knowledge proofs
removed bogus forced newlines in the middle of the text
Aug
16
revised Known plaintext attack on ElGamal encryption
formatting