632 reputation
29
bio website
location
age
visits member for 1 year, 9 months
seen Apr 17 at 12:59

Mar
6
accepted Name for identical operations for encryption and decryption
Mar
6
accepted Is semantic security important in a hybrid cryptosystem?
Mar
6
accepted What exactly could be accomplished with a backdoor in Dual_EC_DRBG?
Mar
6
asked Will non-ECC algorithms like RSA eventually become too inefficient?
Mar
5
comment Why is “multiplying” $g^x$ and $g^y$ not possible?
Back to my highschool math textbooks it is then. Thank you!
Mar
5
accepted Why is “multiplying” $g^x$ and $g^y$ not possible?
Mar
5
asked Why is “multiplying” $g^x$ and $g^y$ not possible?
Mar
3
revised How does TLS generate the shared secret?
structured the answer
Mar
3
revised How does TLS generate the shared secret?
added 475 characters in body
Mar
3
answered How does TLS generate the shared secret?
Jan
3
awarded  Enlightened
Jan
2
awarded  Nice Answer
Sep
17
comment Could RDRAND (Intel) compromise entropy?
I agree - if properly done, hashing it into the pool would make any kind of backdoor much more difficult to implement. Maybe it will be changed again - RdRand has been moved around in random.c quite a lot already.
Sep
17
revised Could RDRAND (Intel) compromise entropy?
added 730 characters in body
Sep
12
comment What exactly could be accomplished with a backdoor in Dual_EC_DRBG?
Is that computationally hard, even knowing all (potentially) hidden curve parameters?
Sep
12
asked What exactly could be accomplished with a backdoor in Dual_EC_DRBG?
Sep
11
comment Is there a theoretical maximum useful keysize given the block-size?
@Avijit Very interesting suggestion and link, thanks! I've updated my answer accordingly.
Sep
11
revised Is there a theoretical maximum useful keysize given the block-size?
added 295 characters in body
Sep
11
comment Could RDRAND (Intel) compromise entropy?
@fgrieu The new code could augment the implementation with additional checks for unexpected behavior (e.g. additionally perform the XOR in software and compare the results). Compensating for such checks without knowing their implementation in advance seems very difficult.
Sep
10
answered Is there a theoretical maximum useful keysize given the block-size?