2,520 reputation
21234
bio website stackexchange.com/users/…
location
age
visits member for 3 years, 6 months
seen 11 hours ago

Moderator♦ pro tempore on French Language, Computer Science and Software Recommendations. I'm also a unix amateur, and a developer on embedded systems with a computer science background and security leanings by trade.

Avatar picture slightly adapted from a photo by Luridiformis (Zonda Grattus).


Dec
6
reviewed Close how to represent message as an integer between $1$ and $n-1$
Dec
6
comment how to represent message as an integer between $1$ and $n-1$
This question has also been posted on Stack Overflow and has been answered there. Do not post the same question on multiple sites.
Dec
6
revised What approach is used here?
added image from link
Dec
6
reviewed Leave Open Questions on rank-attacks in Multivariate Cryptography
Dec
6
reviewed Reviewed Memory-expensive hash from an array of hashes?
Dec
6
revised Memory-expensive hash from an array of hashes?
tite; formatting
Dec
6
reviewed No Action Needed Block size vs key size confusion
Dec
6
reviewed No Action Needed Inverse of a function $f_k(x) := f (x ⊕ k) ⊕ k$
Dec
6
reviewed No Action Needed In cryptographic protocols, what protects against an attacker dropping messages?
Dec
6
reviewed Edit Does Ed25519 support cryptographic threshold signatures?
Dec
6
revised Does Ed25519 support cryptographic threshold signatures?
added text posted as comments
Dec
6
reviewed Reopen Reversing a Psuedo Crytographic Hash
Dec
6
revised DES key complementation property
deleted 26 characters in body; edited title
Dec
6
revised DES with the bitwise complement of a key
more specific title; formatting
Dec
5
comment Will X9.31 remain a secure & acceptable deterministic random generator beyond 2015?
@william_fr Reseeding (at a sufficient rate) from /dev/urandom would be enough to provide backtracking resistance, since /dev/urandom has backtracking resistance.
Dec
5
comment Will X9.31 remain a secure & acceptable deterministic random generator beyond 2015?
@william_fr I'm not familiar with Botan. From reading the manual, I gather that it periodically mixes in entropy. Mixing entropy into the RNG state makes backtracking harder, so if this happens at a sufficient rate, you have backtracking resistance. I can't tell from reading the manual how fast that happens or what entropy sources are used; that would determine how many recently-generated keys are compromised if your server is compromised at some point.
Dec
5
revised Roots in modulo field
deleted 84 characters in body; edited title
Dec
5
comment Will X9.31 remain a secure & acceptable deterministic random generator beyond 2015?
Do you consider the lack of backtracking resistance to be a concern?
Dec
5
answered Will X9.31 remain a secure & acceptable deterministic random generator beyond 2015?
Nov
30
reviewed Close Meaning of Multiplicative Group to the power n i.e. Z^n