Reputation
43,735
Next tag badge:
134/100 score
19/20 answers
Badges
6 104 175
Newest
 Revival
Impact
~1.1m people reached

Jan
11
awarded  Enlightened
Jan
11
awarded  Nice Answer
Jan
11
awarded  Good Answer
Jan
11
reviewed Approve What is a white-box implementation of a cryptographic algorithm?
Jan
11
awarded  Good Answer
Jan
4
awarded  Good Answer
Jan
3
comment Can you explain Bleichenbacher's CCA attack on PKCS#1 v1.5?
@Myath: ah no, that's the tricky point. If the server proceeds with a random key in case of bad padding, an inconsistent Finished does NOT reveal that the padding was bad -- maybe the padding was good, and the server merely used whatever pre-master secret it thus obtained (and is unknown to the attacker).
Dec
31
awarded  Nice Answer
Dec
30
revised How can I implement the elliptic curve MOV attack myself?
added 36 characters in body
Dec
18
awarded  Nice Answer
Nov
29
awarded  Nice Answer
Nov
15
awarded  Enlightened
Nov
5
awarded  Guru
Nov
5
comment Can ECDSA signatures be safely made “deterministic”?
32 bytes, so 256 bits. There are roughly 2^256 valid signatures for a given message and private key. They correspond to the roughly 2^256 possible values for the internal value k (the one which is supposed to be generated randomly in "standard ECDSA", and is generated deterministically in deterministic ECDSA).
Nov
5
answered How does the size of the prime affect Elliptic Curve Bit Security?
Nov
1
comment Is it possible to reduce the size of an RSA key?
Since a 2048-bit RSA key is commonly said to be "112-bit equivalent", we could even lower the seed length to 112 bits with no loss in security. We may even scrape a few bits because each try in brute force attack would require, on average, a few hundreds of GCD with big integers, and that's not exactly cheap. On the other hand, take note that regenerating the key from the seed will be rather expensive, likely intolerably so in many embedded systems.
Oct
28
awarded  Nice Answer
Oct
28
revised Why do “nothing up my sleeve numbers” have low entropy?
added 316 characters in body
Oct
27
awarded  Good Answer
Oct
25
awarded  Enlightened