Reputation
3,047
Top tag
Next privilege 3,500 Rep.
Protect questions
Badges
2 15 38
Newest
 Yearling
Impact
~55k people reached

Aug
23
comment What is the recommended key length for digital signature?
I'm voting to close this question as off-topic because it's looking for a web service, not asking about cryptography.
Aug
17
comment Is it possible to get an RSA encryption key by comparing the unencrypted and encrypted file?
Actually, from two (plaintext, ciphertext) RSA pairs, you have a good chance of finding the public key. It's only the private key that can't be found in any decent cryptosystem.
Aug
17
comment Is it possible to get an RSA encryption key by comparing the unencrypted and encrypted file?
@SEJPM You might be able to find the public key, and that wouldn't be a problem in typical scenarios.
Aug
16
comment Details related to the ZIP algorithm used in PGP message encryption?
No, this question is off-topic on a site about cryptography or security, since it has nothing to do with either. It would be on-topic on Super User since it's about how an end user tool works. But your question is not clear. Have you looked up the specification of this algorithm? What do you mean by “the difference between them”? They're different algorithms, obviously. Do you understand how they work? If not, start with that, before comparing them.
Aug
11
comment how to install cryptoverif?
I'm voting to close this question as off-topic because it is about installing software.
Aug
11
comment how to install cryptoverif?
A question about modeling a protocol with Cryptoverif might be on-topic here, but questions about installing software are off-topic. You can ask questions about Windows software on Super User. You will need to provide more information: how did you try to install it? What did you download? What did you do next? What happened? Be sure to copy-paste all error messages.
Jul
22
comment Question about the key in RC4
This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post - you can always comment on your own posts, and once you have sufficient reputation you will be able to comment on any post.
Jul
17
comment Why does “2xAES-256” provide “99.99%” security strength whereas “1xAES-128” provides “40%”?
@mikeazo “Meat in the middle attack” is a great name for a sandwich! What's the recipe?
Jul
15
comment What good is a hash accompanying a program?
PGP only helps if the recipient has some way to authenticate the signature. Otherwise it's just one more generation of the chicken-and-egg problem.
Jul
15
comment What good is a hash accompanying a program?
Similar question on Unix & Linux: Why compute checksums of downloaded files?
Jul
8
comment Diffe-Helman Exchange result is always 1
@poncho That's interesting. What information is leaked? How does it help that $g$ isn't a generator?
Jul
2
comment How often does RSA-OAEP have a leading zero?
@TBridges42 A key that's one bit short would have the expected number of bytes, yes. But it's unclear to me whether the file with the problematic length even contains a key (and if it does, what makes you sure that it's an RSA key). At that level of remove, it's difficult to know what the vendor did wrong, what your customer is perhaps not reporting faithfully and completely, and what you might be mixing up.
Jul
1
comment How often does RSA-OAEP have a leading zero?
Did you mean bytes where you wrote bits? A 128-bit RSA key would not bring any security, a 1024-bit key is as yet unbroken but should be at least scheduled for replacement.
Jun
16
comment how does https key get shared?
See “Certificates and Authentication” in security.stackexchange.com/questions/20803/…
Jun
15
comment Should I use ECB or CBC encryption mode for my block cipher?
This answer is completely wrong. ECB has no strengths. Its only usefulness in a crypto library is as a building block for other modes that the library doesn't support.
Jun
8
comment Converting ECC Code from python to Java. Extended Euclidean Algorithm not working.
This is a programming problem, unrelated to the fact that the algorithm you're implementing is useful for cryptography. It's off-topic here, but you could ask on Stack Overflow.
Jun
6
comment Why does anyone use elliptic curves for a CSPRNG?
Few people actually use Dual_EC_DRBG. You may want to try to investigate why the few people listed in that thread did it.
Jun
5
comment How do we know a cryptographic primitive won't fail suddenly?
@fgrieu Would it be ok to say that there is a single family of algorithms, the one-time pad and essentially equivalent variants (the key point being at least as much key material as payload, hence impractical)?
May
27
comment Asymmetric cipher with multiple public keys
@RickyDemer Why ask me here and not there? Anyway: so what? I only changed the title and the tags. I shrunk the very long title to the main point of the question, which is that it isn't enough to specify the password and “AES” in order to have compatible tools. If the IV was the only variable, all tools would be compatible in practice since they pretty much always prepend the IV to the ciphertext.
May
18
comment How to securely store data? / How to securely encrypt a file?
Given the scope, I suggest a chat or meta discussion on the topic first. There's a lot of good material in your answer, but I fear that it's all packed so tightly that it's difficult to find the relevant parts for any given problem.