32,416 reputation
562124
bio website bolet.org/~pornin
location Quebec City, Canada
age 39
visits member for 3 years, 3 months
seen 2 hours ago

Cryptographer, programmer in several languages (C, Java, several assemblies, Pascal, Forth...). I also have a life.


Apr
13
answered Perfect Forward Secrecy in TLS
Apr
12
answered Is there an algorithm to check if an elliptic curve is secure?
Apr
10
awarded  Nice Answer
Apr
5
answered Wrong Test Vector for HKDF with HMAC-SHA256
Apr
3
comment Should we MAC-then-encrypt or encrypt-then-MAC?
@Clément: the confusion comes from the widespread (but wrong) habit of calling MAC "signatures". In fact MAC and signatures are very different things used in very different contexts. Sign-then-encrypt protocols also use a distinct encryption key for each message, which nullifies all padding oracle attacks; and the signature is meant to serve as proof (e.g. in a trial), so it MUST be applied on the plaintext message. In MAC+encrypt contexts, the same symmetric key is often reused, and there is no "proof" requirement.
Apr
2
reviewed Approve suggested edit on
Apr
2
reviewed Approve suggested edit on
Mar
30
answered How is the curve equation used in ECC?
Mar
28
answered Alert protocol in TLS
Mar
27
comment Difference between lightweight, online and low memory Authenticated Encryption schemes
One may also note that there are "semi-online" schemes where the size of the input (but not the contents) must be known from start (e.g. CCM).
Mar
27
awarded  Nice Answer
Mar
25
awarded  Good Answer
Mar
25
awarded  Nice Answer
Mar
25
answered Construct an encryption algorithm using hash function
Mar
23
reviewed Satisfactory Secure degree reduction for Shamir's secret sharing
Mar
23
reviewed Needs Improvement Choice of reduction polynomial in Whirlpool's internal cipher
Mar
23
reviewed Excellent ASCII: weakness
Mar
23
reviewed Excellent Is this approach to generating a “random” number from a sha512 hash effective?
Mar
23
reviewed Satisfactory Can passwords be stored securely so that a similarity comparison can be made?
Mar
23
reviewed Excellent Signature based on public key cryptography and forgery