Reputation
23,284
Top tag
Next privilege 25,000 Rep.
Access to site analytics
Badges
4 34 86
Newest
 Enlightened
Impact
~586k people reached

Feb
7
awarded  Enlightened
Feb
7
awarded  Nice Answer
Jan
27
comment Is TLS secure against VM reset attacks?
@RichieFrame, as far as I know, the answer is "no": SSL was designed before these attacks were even known in the cryptographic community.
Jan
27
comment Is TLS secure against VM reset attacks?
You seem to be claiming that there are no protocol-level vulnerabilities. Can you support that claim with evidence, analysis, citations, or other reasoning? (Just because there exist some implementation-level vulnerabilities doesn't mean there are no protocol-level vulnerabilities. Put it another way, just because we know of some implementation-dependent vulnerabilities doesn't mean that there are no vulnerabilities that apply to all implementations.)
Jan
27
asked Is TLS secure against VM reset attacks?
Jan
25
awarded  Nice Answer
Jan
21
awarded  Popular Question
Jan
15
comment Are there any advantages in using proprietary encryption?
This has been covered in incredible depth over at Security. SE. See security.stackexchange.com/q/66552/971, security.stackexchange.com/q/24449/971, security.stackexchange.com/q/44094/971, security.stackexchange.com/q/2430/971, security.stackexchange.com/q/32064/971, security.stackexchange.com/a/2210/971. I'm not sure there's much purpose in repeating all of those points here...
Dec
22
comment Differences Between White-Box Cryptography and Code Obfuscation
@NeilSmithline, everything I wrote still seems valid. There have of course been new results and new developments in obfuscation since then, but nothing that invalidates my answer, as far as I know. For instance, you might enjoy reading about indistinguishability obfuscation.
Dec
17
awarded  Enlightened
Dec
17
awarded  Nice Answer
Dec
16
accepted Non-deniability of data sent over TLS
Dec
12
asked Non-deniability of data sent over TLS
Dec
8
awarded  Good Answer
Nov
20
awarded  Popular Question
Nov
2
awarded  Popular Question
Oct
27
comment Block Cipher Without Key Schedule?
@CodesInChaos, Huh. Confusing. The question doesn't mention anything about two individual ciphers. In contrast, it does mention a 2-round cipher (which would be natural to apply a MITM attack to, on its own, without needing another cipher for the exercise to make sense). Puzzling.
Oct
27
comment Block Cipher Without Key Schedule?
I don't understand why you need to avoid the key schedule. The implementation of the meet-in-the-middle attack can ignore the key schedule and treat the cipher as if it has two independently keyed round subkeys. (Alternatively, you could rip out the key schedule and use independent round subkeys as part of the cipher spec.) So I can't understand where the question is coming from.
Oct
23
comment Proof of storage scheme
@JohnTromp, I don't have a specific time period in mind, so a scheme that works for any of those would be interesting -- you pick. :-)
Oct
23
revised Memory-hard proof-of-work: are they ASIC-resistant?
Clarify based on John Tromp's answer.