Reputation
21,561
Next tag badge:
97/100 score
23/20 answers
Badges
4 29 79
Impact
~448k people reached

Apr
15
awarded  Popular Question
Apr
9
awarded  Guru
Apr
8
awarded  Nice Answer
Apr
5
comment Will ANY prior knowledge assist in determining contents of a SHA1 hash?
@InfernusDoleo, you'll be fine, if that 26-character secret key is truly secret and chosen uniformly using a crypto-quality randomness source. That large secret key means that the space of candidate inputs is very large, so brute-force won't work. The fact that you can see many outputs with related inputs doesn't help given that the secret key is so large.
Apr
4
comment Will ANY prior knowledge assist in determining contents of a SHA1 hash?
@InfernusDoleo, I can't answer that, because it's not clear what you intend the full input to the hash to be. If you want a more detailed answer, list all the parts of the input to the hash and what is known about each. An incrementing nonce counts as a known/predictable part of the input, since it can be predicted.
Apr
4
answered Will ANY prior knowledge assist in determining contents of a SHA1 hash?
Apr
4
comment Will ANY prior knowledge assist in determining contents of a SHA1 hash?
You mean knowing some of the input to SHA1, or knowing some of the output? (you talk about knowing parts of the hash, but usually when we say "the hash" we mean the output of SHA1, not the input)
Apr
1
comment How can mega store my login details and still be secure?
@tagyro, thank you for the pointer. Unfortunately, a source code repository is not a substitute for a design document that describes how the architecture addresses these threats. (That said, from xemacs' answer, it sounds like they did exactly what I speculated in my answer.) I think the links to vulnerabilities in early versions of the system are relevant to understanding the history of the system. If there are public documents that respond to that analysis and explain why they're wrong or how they've been fixed, with technical details, I'd gladly update my answer with that information.
Mar
28
awarded  Nice Question
Mar
27
reviewed Approve Practical brute-force attack on 128 bit encryption
Mar
25
answered Discrete log accumulator without pairings
Mar
22
awarded  Nice Answer
Mar
16
comment How to check if a sequence is generated by a linear congruential generator?
What do you mean by "a sequence of numbers starting at the nth bit"?
Mar
12
awarded  Notable Question
Mar
11
comment Encrypt-then-MAC: Do I need to authenticate the IV?
This answer contains incorrect statement. 1. It's not just "safer" to MAC the IV; it's unsafe if you don't MAC the IV. 2. "although Mallory can't predict the result of the decryption in any way" - This is simply false. Moreover, I don't know what you mean by "an invalid message", but there's no guarantee that the decryption will be "invalid"; it might be a completely valid message that just happens to be something other than what the sender wanted to send (which would amount to a break of integrity).
Mar
11
comment Is the 1st Encrypted Block Less Secure Than Subsequent Ones?
We expect you to do a significant amount of self-study and research before asking, including consulting standard resources (like Wikipedia and/or standard textbooks). This helps you craft a better question, and sometimes enables you to answer your question on your own. In this case, see e.g. en.wikipedia.org/wiki/Block_cipher_mode_of_operation#CBC. Look at the diagrams there. Why do you think the first block has fewer "permutations" or a closer relationship to the original message? The diagram looks identical for the first block....
Feb
28
comment What would a backdoor in symmetric key cipher look like?
This is already covered by crypto.stackexchange.com/q/1935/351 and crypto.stackexchange.com/q/675/351 (both of which you could have found by searching in the backdoors tag).
Feb
21
comment Anonymous Gravatar Problem
Thank you for the comments. That helps me understand this much better. I encourage you to edit the question to include this extra information -- comments are transitory and can disappear.
Feb
20
comment Anonymous Gravatar Problem
This answer might benefit from a bit more explanation. Where do the ephemeral keypairs come from? (how are they generated, and who knows them?), how do they come to be known to both Gravatar and the site?, and how does this differ from CodesInChaos's previous answer?
Feb
8
comment How many bits can be safely extracted from the BBS generator at each step?
@Nova, but I did answer the question of the OP. (Perhaps you missed it?) The answer is: zero bits, for practical parameters. There is no number of bits that can be extracted safely, with provable security, for practical parameter settings. That does answer the question that was asked.