568 reputation
413
bio website codingrobots.com
location
age 31
visits member for 3 years, 2 months
seen Aug 10 at 10:54
Programmer and founder at Coding Robots

Aug
27
accepted What are the safe ways to derive HMAC key using block cipher?
Aug
27
awarded  Student
Aug
27
comment What are the safe ways to derive HMAC key using block cipher?
Thank you! Regarding your last point: would it make sense (assuming that we can use block cipher with our own keys) to derive an intermediate key like you said, and then run block cipher with this key in CTR mode to generate the final MAC key of the requested length?
Aug
27
revised What are the safe ways to derive HMAC key using block cipher?
from -> using
Aug
27
revised Can iterated key expansion in Blowfish slow down bruteforce attacks on small key sizes?
added 4 characters in body
Aug
27
revised What are the safe ways to derive HMAC key using block cipher?
added 1 characters in body
Aug
27
asked What are the safe ways to derive HMAC key using block cipher?
Aug
27
asked Can iterated key expansion in Blowfish slow down bruteforce attacks on small key sizes?
Jul
22
comment Is this a secure implementation of password reset email?
The better token would be MACk(userid || timestamp || pwdval), where pwdval is some password-related value that will change once the user resets password (for example, password hash or salt stored in the database). This method ensures that when a user changes the password, the token becomes invalid even if it hasn't expired (i.e. protects against replay attack).
Jul
22
awarded  Editor
Jul
22
revised Encryption algorithm that produces dummy output on incorrect passwords
Deleted signature
Jul
22
suggested suggested edit on Encryption algorithm that produces dummy output on incorrect passwords
Apr
6
awarded  Supporter
Jan
7
awarded  Teacher
Jan
7
answered AESManaged Trade Compliance Issue in United States