| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 10 months |
| seen | May 19 at 16:02 | |
| stats | profile views | 1 |
|
Apr 23 |
revised |
Are cryptographic hash functions perfect hash functions? deleted 26 characters in body |
|
Apr 23 |
asked | Are cryptographic hash functions perfect hash functions? |
|
Feb 17 |
comment |
Why WPA-PSK do not uses Diffie-Hellman key exchange? Michael already suggested a method that provides stronger security: A Diffie-Hellman exchange. This would require an attacker to actively perform a man-in-the-middle-attack, as opposed to starting Wireshark and entering the PSK. I'm also wondering why they didn't implement it like that. |
|
Feb 12 |
comment |
Is semantic security important in a hybrid cryptosystem? Your're right, that was a typo - I meant random plaintext as input to the asymmetric cipher. I've changed the question accordingly. Thanks! |
|
Feb 12 |
revised |
Is semantic security important in a hybrid cryptosystem? added 4 characters in body |
|
Feb 11 |
accepted | Is RC4 a problem for password-based authentication? |
|
Feb 11 |
asked | Is semantic security important in a hybrid cryptosystem? |
|
Feb 9 |
asked | Name for identical operations for encryption and decryption |
|
Aug 4 |
asked | Is RC4 a problem for password-based authentication? |
|
Aug 1 |
accepted | What are the dangers of predictable (repeated) plaintext structures? |
|
Aug 1 |
revised |
What are the dangers of predictable (repeated) plaintext structures? deleted 28 characters in body |
|
Aug 1 |
asked | What are the dangers of predictable (repeated) plaintext structures? |
|
Jul 31 |
comment |
Does TLS use RC4-drop[n]? Now it makes sense, thanks again. I was confused by RFC 4345 mentioning the possibility of recovering the key from the first keystream output bytes, but now I think they probably just want to be on the safe side and are not referring to actual attacks in that paragraph. |
|
Jul 31 |
accepted | Does TLS use RC4-drop[n]? |
|
Jul 31 |
comment |
Does TLS use RC4-drop[n]? Thanks, that pretty much answers my question. Just to make sure, regarding the second issue: There is no (known) way to derive the RC4 key from a single keystream alone, right? So even when the very first thing that is sent in a RC4 encrypted connection is gigabytes of known plaintext (zeroes, for example), the key cannot be easily recovered? (Assuming that the initial key has never been used before, even partially - unlike WEP etc.) |
|
Jul 31 |
asked | Does TLS use RC4-drop[n]? |
|
Jul 31 |
awarded | Scholar |
|
Jul 31 |
accepted | How does a birthday attack on a hashing algorithm work? |
|
Jul 31 |
accepted | Why is a MAC needed? |
|
Jul 20 |
awarded | Editor |