Reputation
586
Top tag
Next privilege 750 Rep.
See votes, expandable usercard
Badges
6 15
Newest
 Caucus
Impact
~7k people reached

Aug
27
comment Can iterated key expansion in Blowfish slow down bruteforce attacks on small key sizes?
Great, thank you! I didn't know about EksBlowfish. Perhaps, you can rewrite this comment into an answer, and I'll accept it.
Aug
27
comment Can iterated key expansion in Blowfish slow down bruteforce attacks on small key sizes?
Oh, I think that's what you suggested, actually, right?
Aug
27
comment Can iterated key expansion in Blowfish slow down bruteforce attacks on small key sizes?
I could, of course, stretch the key into a longer one with bcrypt, however this would violate the condition of the original problem -- using 64-bit encryption key :) I can restate the question: is using the state of bcrypt(cost, salt, password) directly for encryption of data (instead of encrypting "OrpheanBeholderScryDoubt" 64 times and then using the result as the key for new state) acceptable?
Aug
27
awarded  Scholar
Aug
27
accepted What are the safe ways to derive HMAC key using block cipher?
Aug
27
awarded  Student
Aug
27
comment What are the safe ways to derive HMAC key using block cipher?
Thank you! Regarding your last point: would it make sense (assuming that we can use block cipher with our own keys) to derive an intermediate key like you said, and then run block cipher with this key in CTR mode to generate the final MAC key of the requested length?
Aug
27
revised What are the safe ways to derive HMAC key using block cipher?
from -> using
Aug
27
revised Can iterated key expansion in Blowfish slow down bruteforce attacks on small key sizes?
added 4 characters in body
Aug
27
revised What are the safe ways to derive HMAC key using block cipher?
added 1 characters in body
Aug
27
asked What are the safe ways to derive HMAC key using block cipher?
Aug
27
asked Can iterated key expansion in Blowfish slow down bruteforce attacks on small key sizes?
Jul
22
comment Is this a secure implementation of password reset email?
The better token would be MACk(userid || timestamp || pwdval), where pwdval is some password-related value that will change once the user resets password (for example, password hash or salt stored in the database). This method ensures that when a user changes the password, the token becomes invalid even if it hasn't expired (i.e. protects against replay attack).
Jul
22
awarded  Editor
Jul
22
revised Encryption algorithm that produces dummy output on incorrect passwords
Deleted signature
Jul
22
suggested approved edit on Encryption algorithm that produces dummy output on incorrect passwords
Apr
6
awarded  Supporter
Jan
7
awarded  Teacher
Jan
7
answered AESManaged Trade Compliance Issue in United States