29,856 reputation
12359
bio website
location
age
visits member for 3 years
seen 12 hours ago

20h
reviewed Close How does Random Oracle and Standard Model differ?
1d
reviewed Close why should one use lattice-based systems in epassports in post- quantum computers era?
1d
reviewed Close Security of very simple XOR with random?
1d
reviewed Leave Open RSA was rejected by which journal?
1d
comment RSA was rejected by which journal?
The site is, at best, questionable. For one, Dijkstra's "Go to statements considered harmful" was a letter to the CACM, not a paper. I don't believe there were formal reviews of letters to the editor.
1d
revised Understanding Genkin-Pipman-Tromer's ground potential, side channel attack on RSA
added 314 characters in body
1d
answered Understanding Genkin-Pipman-Tromer's ground potential, side channel attack on RSA
2d
comment What's the point of a Meet In The Middle attack using i.e. double AES with throw-away keys?
@maincodebase: not quite any such attack; if the attacker has enough partial information to limit the number of potential messages to a small bound, as in "The first letter of my password is X", then an AON transform won't help you. On the other hand, we have ciphers that are immune to known plaintext (and chosen plaintext) attacks; hence we don't worry too much about how we might work with a cipher that isn't.
2d
answered What's the point of a Meet In The Middle attack using i.e. double AES with throw-away keys?
Aug
26
answered Are variable-length crypto hash functions still susceptible to collisions?
Aug
26
reviewed Leave Open Good challenges for a crypto competition for teenagers
Aug
26
reviewed Close What's the best packet cipher mode for use with UDP for example? Advantages or disadvantages of any alternatives?
Aug
26
reviewed Close Counter Mode: how to choose the nonce part of the counter?
Aug
26
comment why should one use lattice-based systems in epassports in post- quantum computers era?
You might want to try to reword your question to state more clearly what you are asking. I tried to edit your question, however I gave up trying to figure out what you are asking. Is it just "why can't we use lattice based systems in epassports", or was it something more?
Aug
25
comment Found a way to crack AES-128, what now?
@hunter: it would count as a break even if he could not decrypt a single ciphertext; it would count as an extremely bad break even if he needed a few gigabytes of chosen plaintext.
Aug
25
comment Solution with high decryption cost and low encryption cost
@otus: I don't know why we'd want to slow down the decryptor either; however I believe that's what devd asked for...
Aug
25
comment Solution with high decryption cost and low encryption cost
@otus: If you are saying "he can decrypt multiple messages quickly", well, no, that's why I stir in $S$ (a nonce) into the puzzle that hides $r_i$; different messages will have different $S$ values. If you're saying "he can then test multiple values of $Key$ quickly", I didn't believe that was an issue; $Key$ is (say) a 128 bit value (and hence is immune from brute force search). $Key$ is present solely in case we want to forbid a third party from decrypting at all. If that is not a requirement, $Key$ can be omitted.
Aug
25
answered Solution with high decryption cost and low encryption cost
Aug
25
reviewed No Action Needed Found a way to crack AES-128, what now?
Aug
25
reviewed Close Seemingly simple decryption question