662 reputation
418
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 3 years, 2 months
seen Aug 16 at 12:40

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile


Sep
19
comment What is the lowest level of mathematics required in order to understand how encryption algorithms work?
Related How do I learn Cryptographic/Mathematical notation
Jul
22
comment How can I tell which curve a given ECDSA implementation uses? (P-521 or something else)
I just purchased that $99 book the other day. Glad to know I have the right study material. Thanks for confirming that, and let me know if you come across anything else I should know
Jul
22
comment How can I tell which curve a given ECDSA implementation uses? (P-521 or something else)
I'd like to study the equation 'y^2 = x^3 + ax + b` in more depth. Where should I begin? (how are those variables generated, what are known weaknesses, etc?)
Jul
4
comment Given a message and signature, find a public key that makes the signature valid
Note: If you didn't intend to make this "community wiki" you can flag this for a moderator to undo that... and you can continue to gain reputation for the posting.
Jul
3
comment Why is “mod(n)” so central to most aspects of cryptography?
In an OTP, XOR was explained to me as having a 50% chance of being 1 or 0, resulting in an output with perfect secrecy (up the the limits of the PRG). Is it true that any modulo done in base 10 has a 10% chance of being a given number? If the answer is yes, then I am totally on board.
Jul
1
comment Why is “mod(n)” so central to most aspects of cryptography?
Here is the official take on duplicate questions on this site Where this particular question falls I'm open to whatever is decided.
May
22
comment How much data can I encrypt with AES before I need to change the key in CBC mode?
Part 2 - Could this "risk" be explained to management as the quantity of brute force attempts that we will tolerate? (substitute brute force for X chosen message attacks etc) and 2^64 is the minimum required due diligence?
May
22
comment How much data can I encrypt with AES before I need to change the key in CBC mode?
Part 1 - Could this number (1/2^32) be compared to a Birthday Attack, where the distribution is non-uniform? Namely, where there there is tipping point of where 0.. to some negligible number increases rapidly to a non-negligible number?
May
21
comment How much data can I encrypt with AES before I need to change the key in CBC mode?
@curious Yes, they are from his coursera course. It's really good and packed full of information. I discovered this 2 weeks ago and am trying to finish all the classes in 1 month so I can start the next one on time.
May
18
comment Generating IV in TLS 1.2
I'd be curious to see your C# implementation. Do share a link if you can.
May
18
comment When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
I learned something new today en.wikipedia.org/wiki/Asymptotic_security
May
17
comment When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
Is it correct for me to think/say "negligible in terms of brute forcing". Does negligible apply to any other attack other than brute forcing?
Apr
22
comment LT codes with Homomorphic hashing
Dumb question: What does the symbol ⊕ mean?
Apr
11
comment How can two UProve token holders prove to a 3rd party that they aren't the same user?
I see it here.. will read it. en.wikipedia.org/wiki/Blind_signature
Apr
11
comment How can two UProve token holders prove to a 3rd party that they aren't the same user?
I'm very interested in learning how this would operate, though the Wiki page for ecash is of no use, and all the pages are dead. Do you have any more info or references so I can understand what you mean by a "blind signature on a serial number"... and it's removal?
Mar
27
comment How can two UProve token holders prove to a 3rd party that they aren't the same user?
So that means the issuer needs N attributes, and selectively disclosing them one by one? I suppose I need to mention that the quantity of locations the UProve user will be dealing with numbers in the the millions. A UProve token with just 255 proofs takes quite a long time to generate. I hope there is another solution.
Mar
20
comment What crypto system allows for 3 parties: Party 1 who makes an assertion, Party 2 mutates the assertion, Party 3 validates it
This is very helpful and is a great starting point for my independent studies (even the terms are helpful). Since the Key based approach is based on RSA primes, and I'm trying to integrate with UProve (based on the intractable discrete logarithm problem) is it possible to adapt your line of thinking into this type of mathematical foundation? I'm doing thought experiments on using UProve to display a constant to Alice1 and a different constant when speaking to Alice2... AliceN. Charlie could deduce Bobs ID across every Alice, but the consortium of Alice's couldn't do the same without Bob.
Mar
19
comment Hashing or encrypting twice to increase security?
FYI - This answer was referenced on Bitcoin.SE
Mar
15
comment What is the significance of i^Q mod P = 1 and are there any special properties to be aware of?
Aaah "Group Theory" that is what I needed! Thank you @RickyDemer
Mar
14
comment What is the significance of i^Q mod P = 1 and are there any special properties to be aware of?
Thank you @RickyDemer . I'm not familiar with the symbols ℤ∗P let alone how to type it correctly in Markup. Rather than bore this forum with these questions (unless it's on-topic), what should I learn (where should I learn it) to speak this language?