Reputation
Next privilege 250 Rep.
View close votes
Badges
6
Newest
 Critic
Impact
~261 people reached

  • 0 posts edited
  • 4 helpful flags
  • 195 votes cast
Jan
8
comment Is it secure to use hexadecimal data for IV instead of raw binary?
@StephenTouset Sure...I would generally use the term nonce in that case, rather than IV, but that's splitting hairs.
Jan
8
revised Is it secure to use hexadecimal data for IV instead of raw binary?
edited body
Jan
8
answered Is it secure to use hexadecimal data for IV instead of raw binary?
Sep
30
awarded  Critic
Aug
21
revised zendo data size restrictions
Fix typo
Mar
26
comment zendo data size restrictions
@Gilles I don't know for sure, but since as you say, not all phones have a hardware RNG, I don't see how it can be anything else. Additionally, since it is not under the control of the application, as you point out, they can't reasonably claim that it is a true OTP, because they don't have the required level of control to provide that guarantee.
Mar
26
awarded  Teacher
Mar
25
answered zendo data size restrictions
Mar
25
comment zendo data size restrictions
There is no OTP in any case. As I understand it, the entropy on modern mobile devices depends on a CSPRNG, not (only) a source of true randomness, making this an implementation of a stream cipher, not an OTP. They don't actually know what they're doing, in other words.
Mar
23
awarded  Editor
Nov
2
awarded  Autobiographer
Nov
2
awarded  Citizen Patrol
Oct
2
comment Reordering non-block-aligned parts with DES in ECB mode
This is a security specific topic certainly, but code golf type questions or questions about breaking specific systems or working with a specific ciphertext are indeed off topic here. It might be a better fit at the Programming Puzzles site.
Oct
22
awarded  Supporter