Reputation
3,965
Top tag
Next privilege 4,000 Rep.
Access 'trusted user' tools
Badges
1 13 39
Newest
 Constituent
Impact
~89k people reached

Jun
11
comment Physical entropy source: How many bits entropy per byte is sufficent?
@curiosity: That's correct! As I linked above, there is a case where a malicious, privileged data source can actually decrease the security of a RNG when mixed into it, but this is essentially an edge case.
Jun
9
comment Physical entropy source: How many bits entropy per byte is sufficent?
@curiosity: For example, I just ran ent on a JPEG photo of me at a party. Result was Entropy = 7.970617 bits per byte but I can assure you that the picture is a far from being near truly random.
Jun
8
comment Physical entropy source: How many bits entropy per byte is sufficent?
@curiosity: Passing ent is a necessary but not sufficient condition for a random stream. If your stream fails ent, it (with overwhelming probability) isn't truly random. If your stream passes ent, it may or may not be truly random - but ent cannot determine which. It is a tool that is only useful as a negative indicator.
May
20
comment Can i get a list of over hard and long RSA keys? i think i have found a vulnerability in RSA Algorithm
Ah, yeah, RSA-2048 would have been a better choice in retrospect. Truth be told, I just completely forgot about it.
May
20
comment Can i get a list of over hard and long RSA keys? i think i have found a vulnerability in RSA Algorithm
I think this question uniquely qualifies for the "too broad" close reason: there are (literally) an infinite number of possible answers.
May
20
comment Can i get a list of over hard and long RSA keys? i think i have found a vulnerability in RSA Algorithm
@user3651521: Yes. That is $n=pq$ where $p,q$ are distinct primes roughly 1024 bits in size.
May
8
comment If someone had a list of all primes, would it be possible for them to factor any integer in polynomial time?
I think this answer probably answers your question (with a little thought).
May
5
comment How to calculate if probability is negligible or not
This treatment is a little strange: I think using an asymptotic definition for negligible probabilities would lead to a more precise discussion.
May
3
comment Simplicity and precision in cryptography papers
@cpast: Your comments serves nicely as an answer.
Apr
7
comment How to decrypt a '.enc' file that has been encrypted with RSA using a public key?
You shouldn't destructively edit your posts like that. These questions are meant to serve as potentially useful references for other users. If you remove all details from your question, you destroy any existing content these future users might need.
Apr
5
comment How to decrypt a '.enc' file that has been encrypted with RSA using a public key?
You cannot decrypt the file without the private key. Therefore, you need to obtain the private key somehow. Yet you are only given the public key. Hint: How can you find the private key given the public key?
Apr
2
comment Security strength of RSA in relation with the modulus size
@mikemaccana: I'm glad to hear it! I'm unfortunately inactive on Twitter; the most I do is sometimes glance at other folks' pages.
Apr
2
comment Security strength of RSA in relation with the modulus size
@mikemaccana: Indeed it does! Otherwise it would not be there. :) However, we're not sure of the value of $o(1)$ for values of $n$ that we care about. The complexity of the GNFS is heuristic. I recommend looking at this question and its answers/comments for some more discussion.
Apr
2
comment Security strength of RSA in relation with the modulus size
@mikemaccana: The $o(1)$ is little-o notation. As $n \to \infty$, the value $o(1)$ tends toward 0.
Mar
29
comment Can machine learning analyze random number generator?
It is not known to be impossible to formally prove that a CSPRNG is indistinguishable from random. We merely don't know how to prove it one way or another. If one way functions exist, we do have probably secure PRGs.
Mar
12
comment When is a cipher considered broken?
I disagree that "compromised" is a good word for that scenario, because "compromised" and "broken" are really very similar concepts. I would argue that unsafe is a much better word for "broken in a practical sense". Indeed, your very answer itself explains "compromised" as "no longer considered safe to use".
Jan
20
comment How much (home PC) CPU time is required to generate a prime number of a given size?
@K.G.: Ah, well, I did not intend for this post to really contain a serious prime-finding algorithm; rather I wanted to demonstrate that asymptotically, the task is not difficult, and real world improvements (like your suggestion) make that analysis messier.
Jul
4
comment Getting 88bytes cipher output from 48bytes input in AES
Wow. That paper is....... poor. Like, really poor.
Jun
23
comment How to adjust scrypt parameters for Moore's Law?
Those tests were performed in 2009, from what I remember, so Moore's law has not yet much touched those numbers.
May
4
comment Difference between a nonce and IV
Indeed; in particular I tend to assume that, if the scheme wants a nonce, I can safely use a counter. On the other hand, IVs can sometimes break things if they're predictable (e.g., CBC mode).