Reputation
21,849
Next tag badge:
98/100 score
23/20 answers
Badges
4 29 79
Impact
~464k people reached

May
9
comment On modeling a random oracle hash function which maps $\mathbb{G}_1 \rightarrow \mathbb{G}_2$
What do you mean by "model a random oracle hash function"? Also, do you require it to be a group homomorphism?
May
9
comment Cryptographically secure keyed rolling hash function
Also, if you want us to comment on the security of Tarsnap or Attic, please define more precisely what you mean by "random secret substitution".
May
9
answered Cryptographically secure keyed rolling hash function
May
2
awarded  Nice Answer
May
1
answered reverse an identicon to its source string
May
1
revised Is the CONF key sharing Problem equivalent to discrete log problem?
added 318 characters in body; added 7 characters in body; added 15 characters in body; added 18 characters in body; added 26 characters in body
May
1
answered Is the CONF key sharing Problem equivalent to discrete log problem?
Apr
29
comment Pseudocode for constant time modular exponentiation
You might have missed the "constant time" in the title (and also mentioned once more in the question). I don't blame you, because that wasn't emphasized in the question as it might have been, and the question didn't mention what prior research he'd done (a shortcoming of the question). But I don't think Alex Gaynor was looking for a generic description of the RSA algorithm; I think he was looking for a description of how to make a constant-time implementation of RSA. That said, I agree that the question could have been clearer.
Apr
29
revised Pseudocode for constant time modular exponentiation
added 171 characters in body
Apr
29
comment Pseudocode for constant time modular exponentiation
@figlesquidge, I beg to differ. It does answer the question (just not in way the author had expected). This is an XY problem: the author wants a constant-time RSA implementation (that's the X) and thinks the right approach is to implement it himself even though he doesn't understand the math (Y). I'm telling him that Y is not the answer to X; that the right answer is Z (use well-vetted code, or hire a cryptographer). P.S. "Don't do it" is a perfectly acceptable answer if you explain why: meta.stackexchange.com/q/8891/160917
Apr
29
comment Pseudocode for constant time modular exponentiation
@CodesInChaos, The fact that GnuPG failed does not mean that it is a good idea for a beginner who lacks a strong math background to try to implement RSA on their own. If the OP cannot understand mathematical descriptions of solutions to the problem, the OP probably shouldn't be trying to implement this himself (maybe he needs to hire a qualified cryptographer). Would you hire a random person off the street to design a bridge, if they told you they couldn't understand some of the core elements of bridge engineering (finite elements, differential equations, structural modeling)?
Apr
29
revised Can I make a PRNG that is secure even when state can be modified by user?
Fix a bug in the description of my attack. Simplify the description slightly.
Apr
29
answered Can I make a PRNG that is secure even when state can be modified by user?
Apr
29
accepted Multiple-prime RSA; how many primes can I use, for a 2048-bit modulus?
Apr
28
answered Pseudocode for constant time modular exponentiation
Apr
28
comment Simplified Key Wrapping to Achieve Only Confidentiality?
Ignoring authenticity/integrity is a really bad idea. It has led to successful attacks on confidentiality in the past. I strongly recommend against this sort of thing; use authenticated encryption or an authenticated key wrap algorithm that does provide integrity + authenticity.
Apr
26
comment Tiger Tree Hash vs generic Merkle Tree
Would you care to edit your question to define TTH? Maybe spell out the acronym, give a link, etc.? Also, I encourage you to describe what research you've already done to try to answer the question on your own.
Apr
26
comment Timestamping using a hashed linked list and public known events
@jliendo, I've edited my answer accordingly. The bottom line remains the same.
Apr
26
revised Timestamping using a hashed linked list and public known events
added 1060 characters in body
Apr
26
comment Zero-knowledge proof of a product
This is an excellent start, but it proves that $xy \equiv z \pmod q$, rather than that $xy=z$. I think if you choose $q$ to be $>2k$ bits long, and combine it with a range proof of the size of $x,y,z$, though, this might work. Thank you!