Reputation
502
Next privilege 750 Rep.
See votes, expandable usercard
Badges
4 13
Impact
~14k people reached

  • 0 posts edited
  • 0 helpful flags
  • 13 votes cast
Apr
22
comment How to perform file encryption using 128-Bit AES?
let us continue this discussion in chat
Apr
22
comment How to perform file encryption using 128-Bit AES?
@John Paul Parreño Such questions are better suited for Stack Overflow. Word of advice, if you are new to cryptography and wish to implement a cipher yourself, I'd suggest trying something simpler than AES at first, such as RC6.
Apr
22
comment Does the Biclique attack on AES pose a credible risk to its security?
At the moment, no cryptanalytic attack on full AES is computationally feasible. Hence, there is no practical threat. en.wikipedia.org/wiki/Advanced_Encryption_Standard#Security
Apr
22
comment ID-Secret Scheme
True. This was the first crypto-protocol I attempted to design and there are of course obvious flaws and design oversights. As for the problem faced, asymmetric cryptography proved to be an excellent solution.
Apr
22
accepted ID-Secret Scheme
Feb
23
comment How can one share information using the 'host-proof' paradigm?
@Travis In Adobe Air you can sign your applications with a certificate issued by a recognized certification authority. The problem with cryptography in AS3 is that it is slow. Thankfully there is a way to circumvent this limitation: using Air Native Extensions, but this requires you to publish your applications as native installers which cannot be signed. If speed is not a requirement, this may be a viable solution on first thought.
Feb
22
comment Which one of the Block Cipher modes is the best?
@PaĆ­lo Ebermann The SSL vulnerability you describe is present in TLS 1.0 and lower, not only in SSL 3.0.
Feb
22
accepted Combating traffic analysis over request-response protocols
Feb
22
comment Combating traffic analysis over request-response protocols
I have updated the question to include more information on what I am trying to hide.
Feb
22
revised Combating traffic analysis over request-response protocols
added 810 characters in body
Feb
21
asked Combating traffic analysis over request-response protocols
Jan
12
comment Two mutually untrusted parties want to exchange data: how to ensure each one gets the data it needs?
@Alexandre H. Tremblay Can the trusted third party provide additional data given that it does not exceed 1KB?
Jan
7
revised Related-key attacks on AES
added 8 characters in body
Jan
1
accepted Related-key attacks on AES
Dec
30
revised Related-key attacks on AES
added 2 characters in body
Dec
30
asked Related-key attacks on AES
Nov
20
awarded  Critic
Nov
20
accepted Derived Shared Key vs Distinct Keys?
Nov
20
comment Derived Shared Key vs Distinct Keys?
I'm aware of hybrid encryption. In what I am describing, asymmetric encryption is used to deliver 2 symmetric keys to both parties. These 2 symmetric keys are then XORed to produce an effective key that is then used for bulk encryption. I'm wondering why this is done instead of using both keys in the way I described in the question...
Nov
19
asked Derived Shared Key vs Distinct Keys?