34,362 reputation
571138
bio website bolet.org/~pornin
location Quebec City, Canada
age 39
visits member for 3 years, 8 months
seen yesterday

Cryptographer, programmer in several languages (C, Java, several assemblies, Pascal, Forth...). I also have a life.


Mar
23
awarded  Nice Answer
Mar
22
answered Is it safe to encrypt data by simply randomizing chunks based on a permutation?
Mar
20
awarded  Nice Answer
Mar
19
awarded  Enlightened
Mar
19
awarded  Nice Answer
Mar
11
comment RFC 6979 - Why not simply hash the message & the private key for deterministic ECDSA?
In their article, the EdDSA authors mostly say that: "Standard PRF hypotheses imply that this pseudorandom session key r is indistinguishable from a truly random string generated independently for each M, so there is no loss of security". This is a bit too terse to be called "extensive analysis" but it makes sense. For more analysis, you may read the Leurent & Nguyen article cited from RFC 6979 (under the reference "LN2009"); that article includes some analysis and pointers.
Mar
10
awarded  Revival
Mar
10
answered RFC 6979 - Why not simply hash the message & the private key for deterministic ECDSA?
Feb
28
awarded  Nice Answer
Feb
27
answered Are there any known weaknesses with ElGamal algorithm?
Feb
13
reviewed Edit Can we say that if $P=NP$ there is no CPA secure public key encryption?
Feb
13
revised Can we say that if $P=NP$ there is no CPA secure public key encryption?
not a critical change.
Feb
13
awarded  Enlightened
Feb
13
awarded  Nice Answer
Feb
4
awarded  Nice Answer
Jan
15
awarded  Good Answer
Jan
6
awarded  Enlightened
Jan
6
awarded  Nice Answer
Dec
31
awarded  Enlightened
Dec
31
awarded  Nice Answer