Reputation
39,865
Next tag badge:
398/400 score
83/80 answers
Badges
1 40 88
Newest
 Nice Answer
Impact
~594k people reached

Apr
14
answered Choosing finite field size in Shamir's Secret Sharing Scheme
Apr
14
answered Errata for NIST SP 800-63
Apr
13
reviewed Close Randomness in generation of Virtual Machines from pre-built Image
Apr
13
reviewed Close Standards/RFCs for non-Diffie-Hellman perfect forward secrecy?
Apr
13
comment Prove there is PRG that is not necessarily one-to-one
@ebad: no, that idea doesn't work: why would you expect that $G_2(x) = G_2(y)$ for some $x \ne y$?
Apr
11
reviewed Leave Closed OTP - Why not reuse key? EDITED!
Apr
11
reviewed Close OTP - Reusing key IS SECURE! PROVED!
Apr
10
comment Is $f\colon x\mapsto g(x+1)$ necessarily a pseudorandom function?
If we were to have a distinguisher for $f$, what would that imply about $g$? If we know that $g$ doesn't have a distinguisher, what does that imply about $f$?
Apr
10
comment Is $f\colon x\mapsto g(x+1)$ necessarily a pseudorandom function?
Hint: if you had a distinguisher for $f$ (that is, a way to distinguish $f$ from a random function with some advantage), could you use that to distinguish $g$ from random?
Apr
10
comment (Simple) Tool for analysing performance (speed in particular) of cryptographic hash function?
By performance, do you mean 'how long it takes to hash a block of N bytes'? If so, I don't see how measuring that is any different from measuring the performance of, say, a sorting algorithm (actually, it'd be easier, as most hash functions run in time independent of the data). On the other hand, if you're talking about (say) extracting the hash internal state, and looking for correlations (for example, if the correlations vanish after N rounds), that is obviously cryptographically relevant. However, I don't know of any automated tooling that would help with that.
Apr
10
comment (Simple) Tool for analysing performance (speed in particular) of cryptographic hash function?
I believe that questions about performance measurements might be better suited to Stack Overflow
Apr
10
reviewed Close OTP - Why not reuse key? EDITED!
Apr
10
reviewed Leave Open Any efficient text-based steganographic schemes?
Apr
10
reviewed Close algebraic attacks for mixed operations (mod 2 and mod 256)
Apr
10
reviewed No Action Needed What do I use as the encryption key and initialization vector in AES cfb128
Apr
10
reviewed No Action Needed How multiplicative property of RSA can be exploited
Apr
10
reviewed No Action Needed Substitution Permutation Network (SPN) - Decryption In Mathematica
Apr
10
reviewed Reviewed Is it possible to tweak AES-GCM so that it is satisfactory for whole-disk encryption (like XTS mode)?
Apr
10
comment Is it possible to tweak AES-GCM so that it is satisfactory for whole-disk encryption (like XTS mode)?
Question: where does ZFS get the GCM nonces from?
Apr
10
reviewed No Action Needed Randomness in generation of Virtual Machines from pre-built Image