29,761 reputation
12359
bio website
location
age
visits member for 3 years
seen 15 mins ago

8h
comment What's the point of a Meet In The Middle attack using i.e. double AES with throw-away keys?
@maincodebase: not quite any such attack; if the attacker has enough partial information to limit the number of potential messages to a small bound, as in "The first letter of my password is X", then an AON transform won't help you. On the other hand, we have ciphers that are immune to known plaintext (and chosen plaintext) attacks; hence we don't worry too much about how we might work with a cipher that isn't.
11h
answered What's the point of a Meet In The Middle attack using i.e. double AES with throw-away keys?
1d
answered Are variable-length crypto hash functions still susceptible to collisions?
1d
reviewed Leave Open Ideas for a Crypto competition for teenagers
1d
reviewed Close What's the best packet cipher mode for use with UDP for example? Advantages or disadvantages of any alternatives?
1d
reviewed Close Counter Mode: how to choose the nonce part of the counter?
1d
reviewed Delete Ideas for a Crypto competition for teenagers
1d
comment what is the motivation and need for lattice-based systems in epassports in post- quantum computers era?
You might want to try to reword your question to state more clearly what you are asking. I tried to edit your question, however I gave up trying to figure out what you are asking. Is it just "why can't we use lattice based systems in epassports", or was it something more?
2d
comment Found a way to crack AES-128, what now?
@hunter: it would count as a break even if he could not decrypt a single ciphertext; it would count as an extremely bad break even if he needed a few gigabytes of chosen plaintext.
2d
comment Solution with high decryption cost and low encryption cost
@otus: I don't know why we'd want to slow down the decryptor either; however I believe that's what devd asked for...
2d
comment Solution with high decryption cost and low encryption cost
@otus: If you are saying "he can decrypt multiple messages quickly", well, no, that's why I stir in $S$ (a nonce) into the puzzle that hides $r_i$; different messages will have different $S$ values. If you're saying "he can then test multiple values of $Key$ quickly", I didn't believe that was an issue; $Key$ is (say) a 128 bit value (and hence is immune from brute force search). $Key$ is present solely in case we want to forbid a third party from decrypting at all. If that is not a requirement, $Key$ can be omitted.
2d
answered Solution with high decryption cost and low encryption cost
2d
reviewed No Action Needed Found a way to crack AES-128, what now?
2d
reviewed Close Seemingly simple decryption question
2d
reviewed Leave Open Solution with high decryption cost and low encryption cost
2d
reviewed Close Variants of AES?
2d
reviewed Close Efficiently map $2^n$ unique 64-bit vectors to $2^n$ $n$-bit vectors where $n < 64$?
2d
comment Efficiently map $2^n$ unique 64-bit vectors to $2^n$ $n$-bit vectors where $n < 64$?
I'll vote to close as well; but you might want to consider: "what properties do you want from your mapping?" If you want just any mapping, just chopping off $64-n$ bits off the vectors works fine -- is there a reason why that isn't sufficient?
Aug
24
comment Simple proof that shows AES is not a uniform permutation on any n-bit string?
@ddddavidee: actually, there are block ciphers that can implement an odd permutation; they're not common, but they most certainly do exist. AES (as well as the vast majority of block ciphers) will always do an even permutation.
Aug
23
awarded  modes-of-operation