2,437 reputation
424
bio website touset.org
location San Francisco, CA
age 30
visits member for 1 year, 11 months
seen 48 mins ago

Cyclist. Rubyist.


47m
answered Are password salt equivalent to keystream
Sep
12
revised How Could the Music Industry Go About Implementing Crypto?
edited body
Sep
12
comment Self-Convergent Hashing
I still don't think this question is intelligible. I can't make sense of what's actually being asked.
Sep
12
answered How Could the Music Industry Go About Implementing Crypto?
Sep
12
comment Can we use numbers as a pad in the Vernam cipher - why or why not?
The implementation of the algorithm is literally nothing more than the XOR of the bytes of the message and pad. The real problem will be finding a true random number generator; java.util.Random isn't suitable for this purpose, nor is java.security.SecureRandom.
Sep
12
comment Can we use numbers as a pad in the Vernam cipher - why or why not?
I would find another resource to learn about cryptography. There is so much wrong in that image it hurts; the one-time pad is fundamentally uncrackable given that 1) the message and pad are of equal length, and 2) the pad is truly random, and 3) the pad is never reused. That's it. The bit about shorthand, abbreviations, and removing unnecessary letters is absolute nonsense. It's also not an actual implementation of a one-time pad, as it leaves valuable information like punctuation, numbers, and spaces unencrypted. Complete garbage.
Sep
10
comment Which block cipher mode(s) is most appropriate in these applications?
You may want to re-review block cipher modes of operation.
Sep
10
comment Which block cipher mode(s) is most appropriate in these applications?
Tip: Only two of those modes can be encrypted and decrypted in parallel. One of those remaining two modes is typically unsuitable for use in general.
Sep
9
comment Isn't a simple Vernam cipher as secure as known symmetric key algorithms?
And, to be clear, a cipher based upon a keyed CSPRNG is not a Vernam cipher because the keystream is not truly random. This is the difference between a synchronous stream cipher and a one-time pad: one is computationally secure, the other has perfect secrecy.
Sep
8
comment Breaking Double Encryption
To 1, I believe RC4 has enough output biases that it should be possible to detect its use with a small number of ciphertexts.
Sep
6
comment What is the most secure key expansion routine?
I don't care how a function tries to do it. There's no computable way to take a number with $n$ bits of entropy and deterministically produce a result with $n+k$ bits of entropy where $k>0$. If there was, we'd could trivially implement truly random number generators in software.
Sep
6
comment What is the most secure key expansion routine?
No key expansion (nor any computable function) can return a value with more entropy than what is input. The "best" you can accomplish (for some definition of the term) to is distribute the entropy evenly across the entire output.
Sep
6
comment What is the most secure key expansion routine?
A hash function is a function or method in a programmatic sense. It accepts an input, performs some bounded amount computation, and returns an output. What are the actual criteria you're looking for?
Sep
5
comment What is the most secure key expansion routine?
A hash function is a function. I don't think your expectations are very clear.
Sep
5
comment Base64 for a hash algorithm
I get the feeling that your question is poking at the surface of a deeper issue you're trying to understand. What's the context, and why is the nomenclature important here?
Sep
5
comment Using SHA-256 with different initial hash value
Why not simply use HMAC or NMAC, then, which have security proofs?
Sep
5
comment Using SHA-256 with different initial hash value
What would be the benefits?
Sep
4
comment Change Salt when Changing Password?
Independent of the rest of the question, salts should always change when a password is changed.
Aug
28
comment Why are some key stretching methods better than others?
Really? Your question here quotes the entire section I removed, asking for clarification of exactly why the given pseudocode has the properties claimed.
Aug
28
comment Repeatable crypto
Also, you may wish to look into the architecture of tarsnap, which was designed to efficiently solve content-aware deduplication of encrypted backups.