11d060a946665fb769d865f4bbb48c
Reputation
Top tag
Next privilege 100 Rep.
Edit community wikis
Badges
7
Newest
 Commentator
Impact
~1k people reached

  • 0 posts edited
  • 0 helpful flags
  • 8 votes cast
Jun
15
comment Practical disadvantages of GCM mode encryption
Hi, quick question. Do you have a reference to the paper that describes the GCM IV reuse vulnerability?
Jun
2
comment Which attacks are possible against raw/textbook elliptic curve?
So there is no equivalent to RSA public key encryption in the ECC world (I'm pretty sure that I'm not overlooking any schemes in my literature.. But having verification would be nice)? ECIES is hybrid, ECDH is a key agreement. ElGamal is a scheme that uses any DH construction.
Jun
2
comment Which attacks are possible against raw/textbook elliptic curve?
Indeed. I'm referring to RSA public key encryption.
Jun
2
comment Which attacks are possible against raw/textbook elliptic curve?
There are no other EC schemes which i'm missing here? RSA can safely encrypt up to 245 bytes if I remember correctly (exchanging session keys using some defined format for example). EC has no such means of exchanging session keys. If you want that you should use it in a key agreement scheme.
Mar
19
comment HMAC tag to verify the key (verification in the reverse direction)
$S_0$ and $S_1$ are random, never re-used and hard to compute. So that should not be a problem.
Jun
6
comment Why is verification using DSA slower than verification with RSA?
@HenrickHellström: Thank you for the response.
Jun
6
comment Why is verification using DSA slower than verification with RSA?
A quick follow up, is there a big difference in authentication and verification complexity between RSA with a 1024 modulus and a 2048 modulus?
May
31
comment What do recent announcements about solving the DLP in $GF(2^{6120})$ mean for RSA
Thanks for the very clear explanation!
May
28
comment Why is verification using DSA slower than verification with RSA?
Thanks you for the response and the clear answer!
Apr
16
comment May the problem with DES using OFB mode be generalized for all feistel ciphers
Thank you for the additional information!!
Apr
16
comment May the problem with DES using OFB mode be generalized for all feistel ciphers
Yes, ive updated the original response.
Apr
10
comment May the problem with DES using OFB mode be generalized for all feistel ciphers
Sorry for my late reaction. Thank you for answer my question!
Apr
8
comment May the problem with DES using OFB mode be generalized for all feistel ciphers
Thanks for the response! But with DES, if i encrypt P1 with $k$ i get C1, if i encrypt C1 with $k$ agian, i get back P1? Or only when DES is used with "weak keys"?
Apr
8
comment May the problem with DES using OFB mode be generalized for all feistel ciphers
Thank you for the response! The reverse operation in the feitel network is for OFB a "blackbox". But reversing the subkey is a property of the feistel network, you have to be able to decrypt back? The problem here is using a feistel cipher on OFB-mode and how it "leaks" information.
Apr
8
comment May the problem with DES using OFB mode be generalized for all feistel ciphers
Yes, very true. Let me fix that.
Apr
7
comment PBKDF2 when dkLen and hLen have the same size
Thank you for the quick and clear response!