447 reputation
311
bio website
location
age
visits member for 3 years, 1 month
seen Jul 2 at 0:55

Oct
10
revised Encrypt-then-MAC Confidentiality, Integrity and Authenticity
added 1 characters in body
Oct
10
answered Encrypt-then-MAC Confidentiality, Integrity and Authenticity
Oct
10
comment Encrypt-then-MAC Confidentiality, Integrity and Authenticity
@John: Maybe you meant HMAC instead of HASH?
Sep
28
awarded  Supporter
Sep
27
accepted How can I prevent a message replay with RSA?
Sep
27
comment How can I prevent a message replay with RSA?
How will including a signed random value solve the problem? How does the recipient know that the nonce hasn't been repeated without storing every previous nonce?
Sep
27
awarded  Commentator
Sep
27
comment How can I prevent a message replay with RSA?
For my purposes, the expiration time is time+5 seconds. That gives an attacker a 5 second window to attack. For my system, a single replay can be destructive.
Sep
27
asked How can I prevent a message replay with RSA?
Sep
7
accepted Is this “layered” XOR cipher secure?
Sep
7
asked Is this “layered” XOR cipher secure?
Aug
23
comment Why does nobody use (or break) the Camellia Cipher?
Yes, Yahoo! uses Camellia as the bulk cipher when TLS is used. What is more interesting is that they use a 1024-bit certificate...
Aug
21
comment Is public-key cryptography the only option in this scenario?
Thanks but SPEKE doesn't require the password in cleartext on the server-side, the password can be stored in cleartext, as hash(password) or as hash(password)^2...
Aug
20
comment Is public-key cryptography the only option in this scenario?
Which PAKE method would you suggest, SRP or SPEKE and why?
Aug
20
accepted Why does nobody use (or break) the Camellia Cipher?
Aug
20
asked Why does nobody use (or break) the Camellia Cipher?
Aug
19
awarded  Scholar
Aug
19
accepted Is public-key cryptography the only option in this scenario?
Aug
18
awarded  Editor
Aug
18
comment Is public-key cryptography the only option in this scenario?
I have edit the question to clear any confusion, I apologize for the unclarity.