442 reputation
311
bio website
location
age
visits member for 2 years, 11 months
seen Jul 2 at 0:55

Apr
22
comment ID-Secret Scheme
True. This was the first crypto-protocol I attempted to design and there are of course obvious flaws and design oversights. As for the problem faced, asymmetric cryptography proved to be an excellent solution.
Apr
22
accepted ID-Secret Scheme
Feb
23
comment How can one share information using the 'host-proof' paradigm?
@Travis In Adobe Air you can sign your applications with a certificate issued by a recognized certification authority. The problem with cryptography in AS3 is that it is slow. Thankfully there is a way to circumvent this limitation: using Air Native Extensions, but this requires you to publish your applications as native installers which cannot be signed. If speed is not a requirement, this may be a viable solution on first thought.
Feb
22
comment Which one of the Block Cipher modes is the best?
@PaĆ­lo Ebermann The SSL vulnerability you describe is present in TLS 1.0 and lower, not only in SSL 3.0.
Feb
22
accepted Combating traffic analysis over request-response protocols
Feb
22
comment Combating traffic analysis over request-response protocols
I have updated the question to include more information on what I am trying to hide.
Feb
22
revised Combating traffic analysis over request-response protocols
added 810 characters in body
Feb
21
asked Combating traffic analysis over request-response protocols
Jan
12
comment Two mutually untrusted parties want to exchange data: how to ensure each one gets the data it needs?
@Alexandre H. Tremblay Can the trusted third party provide additional data given that it does not exceed 1KB?
Jan
7
revised Related-key attacks on AES
added 8 characters in body
Jan
1
accepted Related-key attacks on AES
Dec
30
revised Related-key attacks on AES
added 2 characters in body
Dec
30
asked Related-key attacks on AES
Nov
20
awarded  Critic
Nov
20
accepted Derived Shared Key vs Distinct Keys?
Nov
20
comment Derived Shared Key vs Distinct Keys?
I'm aware of hybrid encryption. In what I am describing, asymmetric encryption is used to deliver 2 symmetric keys to both parties. These 2 symmetric keys are then XORed to produce an effective key that is then used for bulk encryption. I'm wondering why this is done instead of using both keys in the way I described in the question...
Nov
19
asked Derived Shared Key vs Distinct Keys?
Oct
13
comment Key Length & Hashing
Why not just use a PRNG?
Oct
11
awarded  Teacher
Oct
11
comment Encrypt-then-MAC Confidentiality, Integrity and Authenticity
I don't see why not...