293 reputation
4
bio website
location
age
visits member for 10 months
seen 18 hours ago
stats profile views 1

18h
accepted Are cryptographic hash functions perfect hash functions?
Apr
23
revised Are cryptographic hash functions perfect hash functions?
deleted 26 characters in body
Apr
23
asked Are cryptographic hash functions perfect hash functions?
Feb
17
comment Why WPA-PSK do not uses Diffie-Hellman key exchange?
Michael already suggested a method that provides stronger security: A Diffie-Hellman exchange. This would require an attacker to actively perform a man-in-the-middle-attack, as opposed to starting Wireshark and entering the PSK. I'm also wondering why they didn't implement it like that.
Feb
12
comment Is semantic security important in a hybrid cryptosystem?
Your're right, that was a typo - I meant random plaintext as input to the asymmetric cipher. I've changed the question accordingly. Thanks!
Feb
12
revised Is semantic security important in a hybrid cryptosystem?
added 4 characters in body
Feb
11
accepted Is RC4 a problem for password-based authentication?
Feb
11
asked Is semantic security important in a hybrid cryptosystem?
Feb
9
asked Name for identical operations for encryption and decryption
Aug
4
asked Is RC4 a problem for password-based authentication?
Aug
1
accepted What are the dangers of predictable (repeated) plaintext structures?
Aug
1
revised What are the dangers of predictable (repeated) plaintext structures?
deleted 28 characters in body
Aug
1
asked What are the dangers of predictable (repeated) plaintext structures?
Jul
31
comment Does TLS use RC4-drop[n]?
Now it makes sense, thanks again. I was confused by RFC 4345 mentioning the possibility of recovering the key from the first keystream output bytes, but now I think they probably just want to be on the safe side and are not referring to actual attacks in that paragraph.
Jul
31
accepted Does TLS use RC4-drop[n]?
Jul
31
comment Does TLS use RC4-drop[n]?
Thanks, that pretty much answers my question. Just to make sure, regarding the second issue: There is no (known) way to derive the RC4 key from a single keystream alone, right? So even when the very first thing that is sent in a RC4 encrypted connection is gigabytes of known plaintext (zeroes, for example), the key cannot be easily recovered? (Assuming that the initial key has never been used before, even partially - unlike WEP etc.)
Jul
31
asked Does TLS use RC4-drop[n]?
Jul
31
awarded  Scholar
Jul
31
accepted How does a birthday attack on a hashing algorithm work?
Jul
31
accepted Why is a MAC needed?