245 reputation
17
bio website
location California
age
visits member for 2 years, 2 months
seen May 3 at 21:24

Mar
25
comment What is the difference between known-plaintext attack and chosen-plaintext attack?
@Giles, on the contrary, the key point is that in the most basic RSA public key cryptography, signing a plaintext is exactly the same mathematical operation as decrypting a ciphertext. Look it up.
Mar
24
comment What is the difference between known-plaintext attack and chosen-plaintext attack?
@Gilles, RSA is very much a cryptographic algorithm. Because of its many drawbacks, it's used as a building block, but it's not necessary to use anything else. The OP asked about chosen vs known plaintext attacks and one of the reasons RSA is used the way it is is because of the chosen plaintext attack it is vulnerable to, and thus it is a good example of how a chosen plaintext can do what a known plaintext cannot.
Mar
15
awarded  Popular Question
Aug
30
awarded  Yearling
Aug
30
awarded  Scholar
Aug
30
accepted Is this password migration strategy secure?
Aug
12
awarded  Nice Question
Jun
22
comment Is this password migration strategy secure?
I submitted an edit to this answer but it was rejected. If you will make the changes I'll accept this answer. All I'm asking is that you re-order the statements so that they go from most practical to least. Start with that the proposal seems like in improvement, then recommend scrypt as a better solution, then discuss the theoretical attack. Please also note that using a random new_secure_salt that changes each time would protect against that attack, since that is the recommended usage of bcrypt.
Jun
19
awarded  Supporter
Jun
18
suggested suggested edit on Is this password migration strategy secure?
Jun
18
comment Is this password migration strategy secure?
Thanks! I like scrypt, but it's too new for me to trust right now and with this scheme we can migrate to scrypt later. In all the systems I'm looking at, an adversary could at best predict, but not choose, the old salt and has no control over the new salt (securely random and unique per user), so the attack would not be practical.
Jun
18
revised protocol-design wiki description
Include excerpt in full tag Wiki, fix typo
Jun
18
awarded  Student
Jun
17
awarded  Tag Editor
Jun
17
revised protocol-design wiki excerpt
Include excerpt in full tag Wiki, fix typo
Jun
17
asked Is this password migration strategy secure?
Jun
17
suggested suggested edit on protocol-design tag wiki excerpt
Jun
17
suggested suggested edit on protocol-design tag wiki
Jun
12
awarded  Teacher
Jun
11
answered What is the difference between known-plaintext attack and chosen-plaintext attack?