Reputation
39,945
Next tag badge:
398/400 score
83/80 answers
Badges
1 40 88
Newest
 Nice Answer
Impact
~597k people reached

Apr
18
comment Is chaotic encryption secure?
The proof of the pudding is in the eating, and the proof of the cryptosystem is in the cryptanalysis. Until I see a chaos-based system undergo cryptanalysis by someone who knows what they're doing, I don't see any reason to trust it.
Apr
17
answered What does L_n is the bit length of the group order n states need for my calculation in ECDSA algorithm?
Apr
17
answered Combining cascaded encryption keys into one key
Apr
17
answered Is authentication length always a subset of encryption length?
Apr
17
reviewed No Action Needed Vigenère, auto-correlation vs Kasiski examination
Apr
17
reviewed No Action Needed Given a message and signature, find a public key that makes the signature valid (ECDSA)
Apr
16
comment Key space vs Cardinality of 1024-bit RSA
Actually, the keyspace would be the set of prime pairs between $2^{511}$ and $2^{512}$. Actually, it's somewhat less, because we insist that the product be between $2^{1023}$ and $2^{1024}$. The set of prime pairs between $2^{511.5}$ and $2^{512}$ is one way to evaluate it.
Apr
16
comment Key space vs Cardinality of 1024-bit RSA
Actually, for 1024-bit RSA, the primes generated will typically be 512 bits each...
Apr
16
comment Are keys generated by the user or block cipher algorithms themselves?
How key generation is done is a very broad topic; there are lots of ways it can be done, and as far as the block cipher algorithm is concerned, it's done by someone else.
Apr
16
reviewed Close Are keys generated by the user or block cipher algorithms themselves?
Apr
16
reviewed Close Finding Vigenère cipher key(s)
Apr
16
reviewed Leave Open why are both ipad and opad required for HMAC?
Apr
16
reviewed No Action Needed How do I control an access code safely?
Apr
16
reviewed No Action Needed EC based password authenticated key exchange protocol
Apr
16
reviewed No Action Needed Does it make sense to have multiple values of authentication and cipher offsets while encrypting a packet?
Apr
16
answered dh parameters someone else generated
Apr
16
comment Diffie-Hellman: choosing wrong generator “g” parameter and its implications of practical attacks
Actually, I would have to disagree that, as long as you pick your DH values randomly, you're probably safe. If your value $g$ has an order $n$ with a small factor $q$, then the attacker can compute the secret exponents modulo $q$. If you pick $g$ and $p$ totally at random, there's a nonnegliable probability that $n$ will have a number of small factors; and hence you'll leak a nontrivial part of the secret. Yes, if you make the secret exponents larger to compensate -- you have to know to do so.
Apr
16
comment Choosing finite field size in Shamir's Secret Sharing Scheme
@VadymFedyukovych: it's not at all clear how good you could make it. Apart from the issues for leaking lsbits (e.g. if you have shares for 3 and 26, I believe that might leak the secret modulo 26-3=23, as 23 is uninvertible in the integers, you also have the problem of probability distributions. You must pick coefficents according to some nonuniform distribution; with $t-1$ shares, the attacker can compute, for any possible secret value, the coefficients that would have been. If any of the coefficents have probabilities that are too small, the attacker can eliminate that possibility.
Apr
16
comment Why perfect secrecy can be ensured when a plain message and a cipher-text based on one-time pad are correlated?
@zhu: if you think there might be a correlation, you might find it fruitful to select a probability distribution for $M$, and compute the resulting distribution of $M \oplus K$ (assuming an independent $K$)
Apr
16
revised Why perfect secrecy can be ensured when a plain message and a cipher-text based on one-time pad are correlated?
added 412 characters in body