2,948 reputation
526
bio website touset.org
location San Francisco, CA
age 31
visits member for 2 years, 5 months
seen 5 hours ago

Cyclist. Rubyist.


Mar
20
comment Is it safe to prefix the a key with a known value?
It's probably a bad idea to use a value like this directly, in that some ciphers may not have been studied under partial key secrecy. At the very least, I would run a key like this through something like HKDF (or even simply a hash function) to evenly distribute the entropy in the key. With that done, the only weakness should be the reduced keyspace.
Mar
20
comment Of what use is my code for finding prime numbers of a certain size?
Nor enough storage capacity to record them all.
Mar
20
comment How dangerous is it to encrypt with AES 256 if the end user knows the unencrypted value?
If you don't need to disclose the data, why send it to the client at all (encrypted or otherwise)? You should have a clear idea of what kind of attack you're attempting to protect against before simply throwing encryption at a problem and thinking it will improve security.
Mar
14
comment Block cipher mode with diffusion on ciphertext
Listen to @RichieFrame. Use the right tool for the job — you're trying to hammer a square peg into a round hole.
Mar
13
revised Of what use is my code for finding prime numbers of a certain size?
deleted 7 characters in body
Mar
13
comment If the text was compressed before using traditional cryptography, how much difficulty increases for frequency analysis attack?
The OP is talking about classical ciphers, not modern ones.
Mar
13
answered Of what use is my code for finding prime numbers of a certain size?
Mar
12
comment Repair AES-128 decrypted file
One could be a large number. :)
Mar
11
answered Repair AES-128 decrypted file
Mar
11
comment Is the 1st Encrypted Block Less Secure Than Subsequent Ones?
The second block depends on the key, plaintext, and previous ciphertext block. But the previous ciphertext block is known to an attacker, just like the IV is for the first block. Hypothesize that an attacker somehow know the first block of plaintext (say it's attacker-controlled). It's clear that this provides no additional information that could be used to break the second ciphertext block; the only input to the second encryption block that depends on that is the IV (the previous ciphertext block), but the attacker already knows it.
Mar
11
answered What is the probability of finding 4 equal bytes?
Mar
10
comment Known plaintext, unknown 128 bit block cipher
If you can control part of the plaintext that gets encrypted, you can potentially break this trivially.
Mar
10
comment CTR HMAC SHA256 implementation
Great, just checking.
Mar
10
comment CTR HMAC SHA256 implementation
What would you be adding a salt to? This sounds worryingly offhand, as if randomly tossing in a salt here and there might improve security.
Mar
8
comment how to integrate 2-3 algorithms to encrypt large data fastly and securely insted using AES?
Additionally, no modern cryptographic algorithm will perform differently based on what type of data it's operating on. Video, audio, text, and anything else is irrelevant, because modern ciphers operate on raw bytes.
Mar
5
comment How to compare between two cryptographic algorithms in terms of security?
Outside of simply misusing the primitives are flaws derived from not understanding the security model. Replay attacks, for example.
Mar
5
comment How to compare between two cryptographic algorithms in terms of security?
The odds are virtually infinitesimal if you're actually implementing the cryptographic primitives yourself. If you're "simply" gluing together existing primitives, the odds are merely severely stacked against you. c.f., every password hashed with MD5/SHA, keys and data appended and hashed for a poor man's (broken) MAC, timing attacks against MACs compared for equality, encrypt-then-mac and mac-and-encrypt schemes, use of unauthenticated encryption modes, IV reuse, rand, etc. There are uncountably infinite ways to get it wrong, and precious few to get it right.
Mar
4
comment How difficult is it to get a key using simple XOR
"Only" 256 bits long.
Mar
3
answered How to compare between two cryptographic algorithms in terms of security?
Feb
27
answered Is this JS library using openssl genrsa -rand improperly?