Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
3
Newest
 Editor
Impact
~56 people reached

  • 0 posts edited
  • 0 helpful flags
  • 4 votes cast
6h
comment HKDF entropy extraction
@StephenTouset In the context of IlmariKaronen's response, I would like to mention the Dual_EC_DRBG CSPRNG backdoor.
7h
comment HKDF entropy extraction
@StephenTouset The app is multiplatform and so CryptGenRandom is used only on Windows. I have no idea what the library uses on other platforms. The purpose is to give the users an option for additional hardening in case the library does not do a great job at using the system's native crypto RNG. In such case, the method I suggested in my question is appropriate.
8h
asked HKDF entropy extraction
May
19
comment Is SHA-256 secure as a CTR block cipher?
For anyone reading this, I believe it would be better to call the 256-bit random value an IV rather than nonce. The value must be random to get the CPA security in this scheme. If a non-random but unique value (nonce) such as a counter was used, the CPA game would be easily defeated (because OP decided to use XOR rather than concatenation on the input to SHA). Just for completeness.
May
19
awarded  Editor
May
19
revised Post-quantum authenticated encryption
added 701 characters in body
May
19
awarded  Student
May
18
asked Post-quantum authenticated encryption
Aug
6
awarded  Supporter