Reputation
Top tag
Next privilege 250 Rep.
View close votes
Badges
8
Newest
 Informed
Impact
~2k people reached

1d
comment I hashed my bag and in it I put… “Is there a hash for unordered items?”
Interesting method, though the growth means you'd have to add dummy items to not give away the amount of items packed
1d
revised I hashed my bag and in it I put… “Is there a hash for unordered items?”
deleted 12 characters in body
1d
accepted I hashed my bag and in it I put… “Is there a hash for unordered items?”
Jul
2
comment I hashed my bag and in it I put… “Is there a hash for unordered items?”
@cygnusv Hm, let me think about this... Commutativity would yield easy collisions, so the inner hash should be a "proper" one instead, right? But then again, if I understood it correctly those collisions are very peculiar and, given strings, would mostly yield garbage words. But still, sha512 for the items themselves wouldn't hurt...
Jul
2
comment I hashed my bag and in it I put… “Is there a hash for unordered items?”
Yes, on second thought #3 seems irrelevant, since H(bag without I) is simple H(other, items, etc)
Jul
2
comment I hashed my bag and in it I put… “Is there a hash for unordered items?”
You mean a Merkle tree? Yes, apart from 3 which on second thought seems irrelevant that does sound like a match, thanks - if one uses addition instead of concatenation
Jul
2
revised I hashed my bag and in it I put… “Is there a hash for unordered items?”
added 180 characters in body
Jul
2
comment I hashed my bag and in it I put… “Is there a hash for unordered items?”
@cygnusv Because of "chainable"? I understand it would be insecure if H(H(A))=H(A), but what I (maybe unfortunately) called chainability merely allows splitting the hashes, and come to think of it is not even necessary
Jul
2
asked I hashed my bag and in it I put… “Is there a hash for unordered items?”
Feb
16
asked Is there a method to combine encryption and ring signing?
Dec
5
comment At the current time, is SHA256 the de facto standard for strong cryptographic hashes?
Question about the previous comment: “Weaknesses” in SHA-256d?
Sep
15
awarded  Informed
Sep
11
awarded  Excavator
Sep
11
revised How do you find a cheater in Shamir Secret Sharing?
fixed logic
Sep
11
accepted Is a continuous stream of encrypted data embedded in garbage more or less secure than only encrypting the data?
Sep
11
comment Should we sign-then-encrypt, or encrypt-then-sign?
The more general statement to make (e.g. from your short answer) is "don't sign anything that doesn't provide enough context"
Sep
11
suggested approved edit on How do you find a cheater in Shamir Secret Sharing?
Aug
14
comment What is the actual difference between security through obscurity and true encryption?
@mikeazo I was so hoping there was an xkcd for this :-D
Aug
14
comment What is the actual difference between security through obscurity and true encryption?
Very good point. A former employee decreased inbound traffic a lot by simply remapping the (needed) SSH ports... I guess you agree with my comment then :-7 Of course an obscured system will be considered a more interesting challenge to the potentially more harmful intruders. Well, that's what honeypots are for...
Aug
14
comment What is the actual difference between security through obscurity and true encryption?
Here's a nice quote from that linked SO question: If someone discovers the password, you can change the password, which is easy. If someone finds the location, you need to dig up the money and move it somewhere else, which is much more work. And if you use security by obscurity in a program, you would have to re-write the program... – Thomas Padron-McCarthy Feb 11 '09 at 15:27