17,730 reputation
32063
bio website
location
age
visits member for 2 years, 8 months
seen 1 hour ago

Sep
7
answered Randomized stream cipher using multivariant quadratic equations
Sep
7
revised Why is the salt used only once in PBKDF2, while the password is used often?
added 1627 characters in body; added 158 characters in body
Sep
7
answered Why is the salt used only once in PBKDF2, while the password is used often?
Sep
6
awarded  Necromancer
Sep
4
awarded  Nice Answer
Sep
3
comment Is Porticor's “homomorphic” key encryption something that can really be done or is it just marketing hype?
See also How is CipherCloud doing homomorphic encryption? for a related topic (though not identical).
Sep
1
comment verify contents, but not order
Either approach will work. Mixnets might be more efficient. Mixnets also might be easier to understand, depending upon what you find more intuitive. Or, they might not. It's just one more approach you could consider. (I don't immediately see any reason to think that one will be more of a "bother" than the other, or any reason to think that using zero-knowledge proofs would be inherently superior to mixnets, or vice versa.) And btw, many mixnet schemes do use zero-knowledge proofs internally.
Sep
1
answered verify contents, but not order
Aug
31
answered Malleability attacks against encryption without authentication
Aug
29
awarded  Convention
Aug
28
comment Secure Hash Function based on AES
@Thomas, no, that's not likely to be enough. Lots of people have studied how to build a hash function out of AES, and the consensus view is: it's not a very promising direction. You're probably not going to get something of adequate strength out of AES (at least, not something simple and as fast as AES). We could spend all day going back with various proposed schemes and showing how they're broken, but let's jump past all that to the bottom line: this is not a promising direction to build a hash function.
Aug
26
comment Is there a way to make RC4 (ARCFOUR) secure, or is it completely broken?
@KevinJin, I think you should ask a separate question for those issues. But really, my recommendation is: don't do any of those things. Instead, use TLS. It will provide a secure way to establish a secure connection between the client and server.
Aug
25
answered Is there another resource for Carter-Wegman-style message authentication?
Aug
25
comment Is there another resource for Carter-Wegman-style message authentication?
Are you looking for something from the theory perspective (e.g., how to design or analyze a universal hash function)? Are you looking for something from the applied perspective (e.g., how to use Carter-Wegman hashing for message authentication in your application)? The answers will be very different in these two cases.
Aug
25
comment Is there another resource for Carter-Wegman-style message authentication?
This should probably be migrated to Crypto.SE.
Aug
25
revised Is it OK to use a data-encryption key for key wrapping, too?
try to clarify the question (I hope I did not change what was being asked!)
Aug
25
awarded  Organizer
Aug
25
revised How is CipherCloud doing homomorphic encryption?
Add a tag. While I'm at it, improve the wording and title.
Aug
25
answered How is CipherCloud doing homomorphic encryption?
Aug
25
answered Is there a way to make RC4 (ARCFOUR) secure, or is it completely broken?