101 reputation
1
bio website orip.org
location
age
visits member for 1 year, 10 months
seen Apr 14 at 20:48

Programmer, tinkerer, and fiddler.


Aug
28
comment Permutations of pseudorandom data
@fgrieu I was interested in Thomas's experience of affecting (in his case, accelerating) Threefish's performance. Could this expose a timing attack not on the permutation, but on the cipher itself?
Aug
27
comment Permutations of pseudorandom data
+1, but a question: if the run time can be consistently affected like @Thomas describes, could this open side-channel timing attacks that the original implementation is safe from?
Jun
25
comment Does it make sense to use slow hashes in digital signatures?
The extra work for password hashing affects the defender once, but affects the attacker for each password attempt, so there is an asymmetry to exploit when defending.