Reputation
850
Top tag
Next privilege 1,000 Rep.
Edit questions and answers
Badges
3 6
Newest
 Caucus
Impact
~8k people reached

  • 0 posts edited
  • 0 helpful flags
  • 32 votes cast
Dec
7
awarded  Editor
Dec
7
revised Why are protocols often proven secure under the random oracle model instead of a hash assumption?
added 208 characters in body
Dec
7
answered Why are protocols often proven secure under the random oracle model instead of a hash assumption?
Nov
30
answered Stopping timing attacks on AES: Why is it important to prevent the OS from interrupting the AES computation?
Nov
29
answered Message authentication codes construction
Nov
29
awarded  Critic
Nov
29
awarded  Supporter
Nov
29
answered Can someone tell if my Hand Cipher is secure?
Nov
29
comment How to prove membership of a list without disclosing the list members?
@poncho When you say there's a leak of information you mean that statistically don't you ? In which case the unlikelihood of a collision becomes irrelevant since statistical operators like correlation do not care about computational hardness. Also I might be mistaken in my reasonning but there is an infinity of $R2'$ such that $hash(A||R2||hash(m))=hash(A||R2'||hash(m))$ and unless the $Ri$'s have a specific structure an attacker would be unable to tell apart the actual $R2$ from any of the other $R2'$.
Nov
28
answered What cipher mode is suitable for independantly decryptable short messages?
Nov
28
comment How to prove membership of a list without disclosing the list members?
@poncho or we just found a collision for hash...
Nov
27
comment Safety of DSA key parameters sharing
Thanks for the reference and for the precision
Nov
27
comment Safety of DSA key parameters sharing
This discussion followed from the presentation of the paper Public Keys by Lenstra, Hughes et al at Crypto 2012 but the paper itself doesn't mention DH type keys. As for the "never happens in practice" bit you're probably right.
Nov
27
answered Is the AES encryption scheme CPA secure?
Nov
27
answered Safety of DSA key parameters sharing
Nov
21
comment How to construct a good PRF from a block cipher?
Just curious, what is your distinguisher for your first proposal ?
Nov
20
answered What can a master password also be called?
Oct
26
answered Subgroups generators with respect to group generators of composite order
Oct
26
answered Recovering SHA1 knowing 2/3 of the hash generated
Oct
26
comment Would this simple encrypted chat program be feasible using One Time Pads?
The link I posted above to Schneier's blog has the answer to your interrogation. I think the NSA is very good at retrieving information but that doesn't mean that they need to be able to break AES. A faulty (or backdoored) PRNG, side channels or plain bad key management (think WEP) are much easier to get into your system than breaking AES.