20,530 reputation
32573
bio website
location
age
visits member for 3 years, 2 months
seen 7 hours ago

Jun
18
revised Authenticated encryption without padding
added 189 characters in body
Jun
18
comment Authenticated encryption without padding
@RickyDemer, I've updated my answer to provide a construction that you might like better. If provable security is a goal, a better construction is likely to be $E_{k_2} \circ P \circ E_{k_1}$ where $P$ is a public random permutation and $E$ is a length-preserving encryption scheme. (Then even in the case where $E$ is merely xor with a constant, i.e., $E_k(x)=k \oplus x$, then it can still be proven to provide reasonable security, as this devolves to the Even-Mansour construction, which offers provable security guarantees.)
Jun
18
revised Authenticated encryption without padding
added 253 characters in body; added 466 characters in body
Jun
18
comment Can the premaster secret generated by SRP be used as a secure private key?
I recommend that you state the question you want answered in the body of the question.
Jun
18
comment SHA1 collision event probability after n iterations
Did you look at crypto.stackexchange.com/q/15068/351 ? (Did you remember to use search before asking?)
Jun
18
comment SHA1 collision event probability after n iterations
What do you think? What have you tried? Where did you get stuck? Where did you run into this question? What is the context/motivation for your question? This is not a site where you copy-paste your exercise and we do your exercise for you.
Jun
18
comment What are good combinations of public key algorithms or primitives for long term security?
I wouldn't recommend lattice-based methods at this point in time, for long-term security; they haven't been studied in as much detail as others. It wouldn't be shocking if someone discovered a new attack 10 years from now that breaks them significantly faster than we currently know how to.
Jun
18
revised Authenticated encryption without padding
added 219 characters in body
Jun
18
answered Length-preserving all-or-nothing transform
Jun
17
asked Length-preserving all-or-nothing transform
Jun
17
answered Authenticated encryption without padding
Jun
17
answered Non-commutitive and nonassociative algebraic structures in cryptography
Jun
12
answered Use of less than secure random numbers for 'a' during an SRP proof of password
Jun
11
comment Does this protocol provide Perfect Forward Secrecy / are there potential security flaws?
Please make sure to provide a specific technical question in the body of the question. The title is for, well, a title -- and does not replace to need to ask a specific question in the body of the question.
Jun
11
answered Comparing two values without revealing them
Jun
10
awarded  Custodian
Jun
10
reviewed Leave Closed ECDSA: Retrieving non-random k
Jun
9
answered How can one detect if a hash function doesn't have a full image?
Jun
8
awarded  Custodian
Jun
7
comment Security of a security protocol for key exchange, using symmetric-key cryptography
OK, I see, I apologize for my misunderstanding.