754 reputation
15
bio website
location
age
visits member for 1 year, 5 months
seen yesterday

Nov
27
comment Safety of DSA key parameters sharing
Thanks for the reference and for the precision
Nov
27
comment Safety of DSA key parameters sharing
This discussion followed from the presentation of the paper Public Keys by Lenstra, Hughes et al at Crypto 2012 but the paper itself doesn't mention DH type keys. As for the "never happens in practice" bit you're probably right.
Nov
27
answered Is the AES encryption scheme CPA secure?
Nov
27
answered Safety of DSA key parameters sharing
Nov
21
comment How to construct a good PRF from a block cipher?
Just curious, what is your distinguisher for your first proposal ?
Nov
20
answered What can a master password also be called?
Oct
26
answered Subgroups generators with respect to group generators of composite order
Oct
26
answered Recovering SHA1 knowing 2/3 of the hash generated
Oct
26
comment Would this simple encrypted chat program be feasible using One Time Pads?
The link I posted above to Schneier's blog has the answer to your interrogation. I think the NSA is very good at retrieving information but that doesn't mean that they need to be able to break AES. A faulty (or backdoored) PRNG, side channels or plain bad key management (think WEP) are much easier to get into your system than breaking AES.
Oct
26
comment Would this simple encrypted chat program be feasible using One Time Pads?
It does seem that the US only has 3 classification level : en.wikipedia.org/wiki/Top_secret#United_States Second thing, you might be right and there might be a super top secret level that uses a particular block cipher different than AES but there is still a need for interoperability here: NATO countries would need a strong block cipher that all of them know for higly classified military information. Since AES is good enough for NATO country that do not trust each other completely, it's good enough for me
Oct
26
answered Would this simple encrypted chat program be feasible using One Time Pads?
Oct
24
awarded  Teacher
Oct
24
answered Why is a non fixed-length encryption scheme worse than a fixed-length one?