1,834 reputation
2825
bio website stackexchange.com/users/…
location Paris, France
age 34
visits member for 2 years, 8 months
seen 20 mins ago

Moderator♦ pro tempore on French Language and Usage and Computer Science. I'm also a unix amateur, and a developer with a computer science background and security leanings by trade.

Interested in embedded systems? Join the Embedded Programming and Design proposal!

Avatar picture slightly adapted from a photo by Luridiformis (Zonda Grattus) (except where I use another picture).


1d
comment How are private keys stored on disk?
This question appears to be off-topic because it is about software products (which happen to use crypto, but the question isn't related to the crypto).
1d
comment Spurious keys filter
I'm not sure I understand the question. Are you looking for keys that would map a given plaintext to some ciphertext containing only printing characters? Or for keys that would map any plaintext consisting only of printing characters to a ciphertext consisting of only printing characters? What do you mean by “spurious keys” (are you sure you're using the right English word here?)? Are you using “confusion” in the technical sense, and if not what do you mean? Where does key derivation come in?
2d
comment Key construction in the Full Cramer-Shoup cryptosystem
I don't understand your last sentence. What do you mean by “use the less private keys”? Could you give an example?
Apr
20
comment Hybrid encryption with Textbook RSA
Where is the question? This looks like a straight dump of your homework exercise. What part are you having trouble with?
Apr
19
comment Decrypting a small Message using RSA with a Private Key
While this link may answer the question, it is better to include the essential parts of the answer here and provide the link for reference. Link-only answers can become invalid if the linked page changes.
Apr
15
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@e-sushi Again, no, this is not a matter of opinion. Most compilers (C compilers being one of the most common exceptions) will not produce code if they detect that the program does not match some minimal specification which includes checking that no part of the program uses uninitialized memory.
Apr
15
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@HenrickHellström This is blatantly false: if the program passes the verification, it correctly implements the specification that is being verified. The specification may be incomplete — for example, it's very hard to specify the absence of side channels — but what is there can be proved in the right framework. (I'm not saying it's easy!) There is a wide gap (uncomputable, for starters) between implementation and specification.
Apr
15
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@e-sushi Nonsense. This question is not asking for “absolute security”, it's asking about “bugs of the genre of Heartbleed”. It's not just “fun to discuss”, it's a serious topics that researchers work on.
Apr
15
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@mikeazo Information Security might take it; there is a recent somewhat similar, but broader question, which is gathering close votes as unclear but not as off-topic. Computer Science would take it (I'm a moderator there).
Apr
15
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@HenrickHellström You assert that it is possible to write a correct, but unverifiable program. This is true but uninteresting. The question here is whether it is possible to write a correct and verifiable program.
Apr
13
comment How do they implement MAC in TLS?
@CuriousSam TLS “packets” (called records in the specification) are unrelated to how the stream is broken down into TCP packets.
Apr
9
comment SHA256-based stream cipher
Thank you @figlesquidge . I've rescinded my close vote; the question is still too broad but at least it goes well with your answer so I guess that's ok.
Apr
9
comment SHA256-based stream cipher
Please include enough information to make your question self-contained. Note that we do not do full reviews of crytographic schemes (“is this scheme secure?”). We can provide feedback about specific properties (”is this step vulnerable to this type of attack?“). If you edit your question, take care not to invalidate figlesquidge's answer.
Apr
9
comment How to attack a classical cipher using known partial plaintext?
Welcome to Stack Exchange. This answer would be more interesting if you described some algorithms to detect classical ciphers, rather than just linking to some code (whose operating principle isn't even described, at least not at that URL).
Mar
31
comment Testing hardware random number generators?
possible duplicate of How random are commercial TRNGS
Mar
24
comment What is the difference between known-plaintext attack and chosen-plaintext attack?
Well, ok. Raw RSA is a cryptographic algorithm, but it isn't a (good) encryption or signature algorithm. The key point is that signing a plaintext is not the same operation as decrypting a ciphertext. They typically use different keys (because they should have different management policies), and the padding is different.
Mar
19
comment How to create PSK key?
This question appears to be off-topic because it is about the programming aspects of using a cryptographic library, and best answered by reading the documentation anyway.
Mar
7
comment Adding “salt” to “doHash” function in Java
As stated, this is a programming question, which is off-topic here. However, you could edit this to be about cryptography proper: explain the algorithm in the code, and ask how it fails to have preimage resistance (if you don't understand why) or how the algorithm could be modified to achieve this.
Mar
2
comment NTRU crypto from unseen.is; myth busting help
This is about marketing claims regarding cryptography, rather than about cryptography itself. As such this question is off-topic here, but would be on-topic on Information Security as it touches on choosing a method to achieve a security objective. As it happens, this question has already been asked there: A service that claims beyond army level encryption
Feb
21
comment Why do we use XTS over CTR for disk encryption?
@HenrickHellström Yes, it will be a concern for integrity, but not for confidentiality. I didn't dwell on the integrity part much. For replay protection, you can't have a deterministic scheme: there has to be something that distinguishes the latest, valid content from some older, formerly valid content.