meta user
network profile
| bio | website | kevinmontrose.com |
|---|---|---|
| location | New York City, New York | |
| age | ||
| visits | member for | 1 year, 10 months |
| seen | May 15 at 17:15 | |
| stats | profile views | 6 |
Stack Overflow Valued Associate #00004
For no good reason, I'm on twitter. I hear its compelling... somehow.
I also have a blog.
|
Dec 25 |
comment |
Why does Fortuna (RNG) require entropy sources to specify accumulator pool? @CodesInChaos yes, an evil source could only direct its own input. I don't think Fortuna is broken or anything, just seemed odd to allow entropy sources to direct their events and was unsure why that is. |
|
Dec 25 |
comment |
Why does Fortuna (RNG) require entropy sources to specify accumulator pool? @codesinchaos that it would take more events (since it'd have they'd be evenly distributed, outside of the sources control) to force many events into one pool. |
|
Dec 24 |
comment |
Why does Fortuna (RNG) require entropy sources to specify accumulator pool? Off hand it seems like a process id (or equivalent kernel handle, if entropy sources are drivers) would be a pretty decent sourceId. But I guess the take away is that it's an engineering decision, not a cryptographic one then. |
|
Aug 7 |
comment |
Existing works on pre-computing ElGamal ephermal keys @CodesInChaos this is all related to the "Improvements" section, so I don't think a link would contribute much and bordered on self-promotion. I didn't even really explain ElGamal in that post. |
|
Aug 7 |
comment |
Existing works on pre-computing ElGamal ephermal keys I've already told you this, but for the public record, I'll play with the math and see what working out $A_y$ requires (such that the decryption is believable) when you know everything else. |
|
Aug 6 |
comment |
Existing works on pre-computing ElGamal ephermal keys @poncho - outside the scope of this particular question, but in a practical system there's a zero-knowledge proof that can be constructed for ElGamal ciphertexts proving the plaintext falls in a range (in this case [0,1]). |
