20,515 reputation
32573
bio website
location
age
visits member for 3 years, 2 months
seen 5 hours ago

Mar
21
reviewed Needs Improvement Choice of reduction polynomial in Whirlpool's internal cipher
Mar
21
reviewed Satisfactory One-time digital signatures
Mar
21
reviewed Needs Improvement Can passwords be stored securely so that a similarity comparison can be made?
Mar
21
comment Can passwords be stored securely so that a similarity comparison can be made?
There are better answers to this question at security.stackexchange.com/q/3170/971 and security.stackexchange.com/q/36893/971 and security.stackexchange.com/q/53481/971.
Mar
21
reviewed Excellent Secure degree reduction for Shamir's secret sharing
Mar
21
answered Proving a decision was randomly made
Mar
21
answered How does compression before encryption leak info about the input?
Mar
21
answered secure integer comparison
Mar
21
comment secure integer comparison
Is it OK to reveal the offer of the winning ISP (the one with the best offer), in identity to the winning ISP? Do you care more about computation time or latency (total time)? Is it OK to do an interactive computation that involves many round of interaction if this keeps the computation time down?
Mar
21
revised Ensuring that an operation takes a relatively specific amount of time, but easily verify the result
added 150 characters in body; added 408 characters in body
Mar
21
comment Parallel-resistant proof-of-work scheme without hidden knowledge
I confess I don't understand point 3. What would it mean to violate point 3? Also, what do you want the third party to be able to verify, and would it be OK if verification requires cooperation from the creator of the puzzle?
Mar
21
answered Ensuring that an operation takes a relatively specific amount of time, but easily verify the result
Mar
21
comment Entropy when iterating cryptographic hash functions
Thanks, Stephen! I've edited the question further to ask about the general situation, as @fgrieu suggests.
Mar
21
revised Entropy when iterating cryptographic hash functions
Generalization the question to be generally useful, per comment thread.
Mar
20
answered Distinguishing Attack on CBC-MACs
Mar
20
comment What is the idea behind hashing the QueryString in OAuth?
I'd speculate that they want to protect the querystring parameters from tampering/modification. If they weren't included in the hash/MAC input, an attacker could change them freely and the modification would go undetected.
Mar
19
answered Zero Knowledge Proof for Correctness of the product of additive ElGamal Ciphers
Mar
19
comment Zero Knowledge Proof for Correctness of the product of additive ElGamal Ciphers
I encourage you to put in a bit more effort on formatting the question to be easily readable. Did you know you can use Latex (Mathjax) on this site? See the help center for more.
Mar
19
reviewed Approve suggested edit on Zero Knowledge Proof for Correctness of the product of additive ElGamal Ciphers
Mar
19
revised Entropy when iterating cryptographic hash functions
incorporate comments from fgrieu