1,390 reputation
513
bio website
location
age
visits member for 3 years
seen Aug 18 at 23:20

Aug
2
awarded  Yearling
Aug
14
awarded  Nice Answer
Aug
2
awarded  Yearling
Jul
12
comment The probability of finding a limited set of collisions for HMACSHA256
I beleive the latest best consensus among hash function cryptographers is that SHA-2-256 or HMAC[SHA-2-256] is secure against collisions for all practical work and for the forseeable future, with the possible exception of some major major breakthroughs in quantum computing. If you want to be even more conservative, you could use SHA-2-512/256 which is an even more recent NIST standard.
Jul
12
answered The probability of finding a limited set of collisions for HMACSHA256
Jul
6
comment Cryptographic Challenge: How to Say Something Confidentially to Snowden?
Well the point is to make it as little "about trust" as possible. Is it possible that someone could replace the President of $country with a very similar-looking actor and get away with it for awhile on TV? Saddam tried but I don't think he fooled any experts for long. You could impose a short time window on the attacker to forge a convincing video. Next to having Poitras and Greenwald as trusted introducers (ruled out in question), I suspect high resolution video is probably still the best you can get.
Jul
5
comment Cryptographic Challenge: How to Say Something Confidentially to Snowden?
Yes, I did not mean to imply that plaintext was free of authentication problems, just that if we could solve the identity and authentication problems we have well established solutions for message confidentiality and integrity.
Jul
5
comment Cryptographic Challenge: How to Say Something Confidentially to Snowden?
It's identity. Who is Snowden? Is he real? I've only seen evidence of him on this same screen I'm typing this on. Via news reports, mostly @ggreenwald. This is a valuable clue. The only way forward is for Snowden to authenticate a key exchange using what we have: media reports. But it would have to be an activity that was hard to forge. For example consider the news headline: "In rare appearance at airport Snowden performs interpretive dance spelling out the letters 546215007a39af41a445812170f41142238e62bf (Video on Youtube)".
Jul
4
awarded  Announcer
Jul
4
awarded  Nice Answer
Jul
4
revised Cryptographic Challenge: How to Say Something Confidentially to Snowden?
added 146 characters in body
Jul
4
revised Cryptographic Challenge: How to Say Something Confidentially to Snowden?
added 59 characters in body
Jul
4
revised Cryptographic Challenge: How to Say Something Confidentially to Snowden?
added 2370 characters in body
Jul
4
answered Cryptographic Challenge: How to Say Something Confidentially to Snowden?
Feb
23
answered Why are the constants so simple in Keccak?
Aug
17
awarded  Nice Question
Aug
2
awarded  Yearling
Mar
29
comment Can a user of a password-protected Wi-Fi sniff on other user's communication?
When I've looked into wifi hacking, it sounds like a pretty common technique is to DoS the client over the air until it drops and reconnects. I believe this allows the attacker to observe the nonces exchanged at the initial handshake.
Mar
21
comment Is the SILC protocol still used?
Probably mpOTR would be a better choice for new usage.
Mar
6
answered Is the SILC protocol still used?