Reputation
43,930
Next tag badge:
149/100 score
18/20 answers
Badges
6 104 177
Newest
 Nice Answer
Impact
~1.1m people reached

Apr
14
answered What is necessary for generating an elliptic curve?
Apr
14
comment What is necessary for generating an elliptic curve?
The formulas above work only for Koblitz curves, which are very few, and, arguably, won't be generated -- they are already there, so to speak. Also, with a non-prime $m$ (and $m = 2048$ is certainly non-prime), this necessarily implies that there will be non-trivial subgroups, which is harmful to security.
Apr
13
awarded  Good Answer
Apr
13
awarded  Nice Answer
Apr
12
answered Is there an AES identity key?
Apr
11
comment Is GCM still recommended?
A main reason is that proper generation of random values is one of the hardest problems when implementing crypto on embedded devices -- in particular because the quality of the randomness cannot be really tested.
Apr
11
answered Is GCM still recommended?
Apr
11
awarded  Necromancer
Apr
11
revised Inserting a backdoor into a cryptographic hash function
added 1 character in body
Apr
11
comment Inserting a backdoor into a cryptographic hash function
I came up with that example by my own thinking (I was initially looking for a way to make a hash function based on elliptic curves and with a security that could reduced to that of discrete logarithm). I am not aware of any publication of that construction, other than this answer (whether a StackExchange answer counts as "publication" is another question).
Apr
9
awarded  Nice Answer
Apr
4
awarded  Nice Answer
Mar
26
comment How were the DES S-box values determined?
I found it back on the Internet Archive Wayback Machine.
Mar
26
revised How were the DES S-box values determined?
Fixed link.
Mar
25
awarded  Good Answer
Mar
22
awarded  Nice Answer
Mar
10
awarded  Revival
Mar
8
awarded  Guru
Mar
8
awarded  Good Answer
Mar
8
awarded  Nice Answer