Reputation
37,102
Next tag badge:
119/100 score
19/20 answers
Badges
6 82 153
Newest
 Guru
Impact
~824k people reached

Jul
12
awarded  Enlightened
Jul
12
answered Is this commutative encryption protocol secure?
Jul
12
awarded  Nice Answer
Jul
12
reviewed Approve Why Elliptic Curves?
Jul
11
answered Why Elliptic Curves?
Jul
3
awarded  Enlightened
Jul
3
awarded  Nice Answer
Jun
30
awarded  Guru
Jun
24
answered What prime lengths are used for RSA?
Jun
23
reviewed Approve How are timestamps verified?
Jun
20
awarded  Revival
Jun
20
answered Double-and-add/Montgomery VS blinding
Jun
14
awarded  Revival
Jun
14
comment Meaning of entropy of a bitstring in NIST SP 800 - 90A
If passing tests was enough, competitions like eSTREAM would be meaningless. Anyone can run some statistical tests on a PRNG; but it takes years and many cryptographers to assess the actual security.
Jun
14
comment Meaning of entropy of a bitstring in NIST SP 800 - 90A
What I mean is that while statistics can detect things that attackers also know, attackers may know things that statistics do not detect. E.g. for a purportedly "strong" PRNG, if a statistical test detects a bias, then the PRNG is weak; but if the test detects nothing, then one must not conclude that the PRNG is strong. In practice, even bad PRNG are "perfect" from a statistical point of view.
Jun
14
answered Meaning of entropy of a bitstring in NIST SP 800 - 90A
Jun
14
answered Inserting a backdoor into a cryptographic hash function
May
12
awarded  Enlightened
May
12
comment How can I convert a DER ECDSA signature to ASN.1?
It is specified in the standard for DHE parameters, and in the other standard for ECDHE parameters. In the former case (DHE), it is the concatenation of the client random, the server random, and the encoded DH values (TLS encoding, not ASN.1/DER). With ECDHE, this is an encoding of the curve description and the server ECDH public value, this time without the client and server randoms.
May
12
awarded  Nice Answer