20,372 reputation
32371
bio website
location
age
visits member for 3 years, 1 month
seen 8 hours ago

Sep
17
comment Ciphertext-only cyptanalytic attack agianst the affine cipher?
What research have you done? What are your thoughts? What have you tried? We expect you to do some research and try to solve the problem yourself before asking here. What is the motivation for this question or the context in which you ran into it? In particular, are you aware that in practice it is usually easy to find some amount of known plaintext, e.g., through crib-dragging? Note that crypto.stackexchange.com/q/8375/351 and crypto.stackexchange.com/q/5878/351 and en.wikipedia.org/wiki/Hill_cipher describe known-plaintext attacks.
Sep
17
revised Ciphertext-only cyptanalytic attack agianst the affine cipher?
deleted 4 characters in body; edited tags; edited title
Sep
17
comment Ciphertext-only cyptanalytic attack agianst the affine cipher?
@otus, you're right. I'll edit my comment accordingly.
Sep
17
comment Are there cryptographic hash functions with homomorphic properties?
We already have questions here that provide lots of information on this subject. Simply searching on "homomorphic hash" in the search bar at the upper right turned up the following: crypto.stackexchange.com/q/6497/351, crypto.stackexchange.com/q/8074/351, crypto.stackexchange.com/q/12719/351. In the future, you might want to do a bit of research before asking, to help you ask a more informed question.
Sep
17
comment Is appending the hash of the plaintext to the end of an encrypted message sufficient to ensure integrity?
See crypto.stackexchange.com/q/16428/351 and crypto.stackexchange.com/q/9941/351 and security.stackexchange.com/q/13800/971 and crypto.stackexchange.com/q/11440/351, all of which answer your question.
Sep
17
comment On the privacy of perfect hash functions
Do you have a reference? Perfect hash functions in computer science, as normally studied, have nothing to do with cryptography and don't promise to provide any privacy or any other security properties.
Sep
8
revised “Practical” operations supported by functional encryption?
added 75 characters in body
Sep
4
comment Change Salt when Changing Password?
@SteveJessop, I confess I'm not sure if I understand all the details of your scenario. You are aware that you can't start building the rainbow table until you know the salt, and that salts and password hashes are usually not public, right? Are you assuming multiple separate breaches of the password database, and that the user has changed their password in between? That's a pretty rare scenario to target. See my answer for more details.
Sep
4
revised Change Salt when Changing Password?
added 2306 characters in body
Sep
4
comment Change Salt when Changing Password?
@BobBrown, are you assuming the password database is breached twice, at two different points in time? That is very rare.
Sep
4
comment Change Salt when Changing Password?
@otus, I suggest you clarify the attack model. The normal attack model is: at some point in time, the password database is breached. At that point in time, the attacker learns the salt and the password hash at that single point in time. Normally the salts and password hashes are not public and so the attacker cannot observe their values before or after that point in time. So even if the user changes their password many times, the attacker won't get to see more than one password hash -- the password hash at the time when the database was breached. So this doesn't help the attacker.
Sep
4
comment Change Salt when Changing Password?
@RichieFrame, there is no point in building a rainbow table to target a single account. At that point a rainbow table has no advantage over straightforward exhaustive search. What a rainbow table gets you is the ability to amortize effort across multiple accounts (to some extent). If you don't have multiple accounts, there is no amortization, and no reason to build a rainbow table. Lots of misconceptions about rainbow tables....
Sep
4
comment Change Salt when Changing Password?
@SteveJessop, if the account has a high-quality salt, a rainbow table is useless regardless. (I've noticed there's a lot of misconceptions out there about rainbow tables... They are cool, but they are not magic -- they do have limitations.) It's not correct to say that if you don't change the salt the rainbow table is useful. If your salt is unique there is absolutely no point in using a rainbow table. If the attacker knows the salt, the attacker might as well do exhaustive search; that's strictly better than a rainbow table. If the attacker doesn't know the salt, he has no hope.
Sep
4
answered Change Salt when Changing Password?
Sep
4
comment Change Salt when Changing Password?
If a different salt is used for each account, creating a rainbow table would be stupid: it won't work, and it'll be inferior to straightforward exhaustive search. Basically, rainbow tables already don't work (they don't provide any speed-up over exhaustive search) if you use random salts, even if you don't change them. So the purported advantages listed in this answer are not actually advantages of changing the salt...
Aug
31
answered Homomorphic Encryption: how does the equality test on ciphertexts work?
Aug
28
comment How does Random Oracle and Standard Model differ?
possible duplicate of What is the “Random Oracle Model” and why is it controversial?
Aug
28
comment How does Random Oracle and Standard Model differ?
What research have you done? There is lots written on this subject, both in textbooks and in Wikipedia, as well as on this site (try clicking on the random-oracle-model tag under your question to see other questions). I expect you to do a significant amount of research before asking, and to show us in your question what research you've done, and to use the research to frame a narrower question. There is little point in us repeating the information that is already widely available on the Internet. It looks like you haven't done that, so your question isn't a good fit for this site.
Aug
27
comment Is hashing a list of hashes safe?
This is helpful, but it doesn't actually list the bottom-line answer: does this increase the risk of collision? I think the bottom-line answer is no, it's safe -- and it might help to add that to your answer.
Aug
27
comment RSA was rejected by which journal?
What research have you done? Where did you hear this? Are you thinking of Merkle's puzzles?