29,626 reputation
12359
bio website
location
age
visits member for 3 years
seen 2 days ago

Aug
11
comment CMAC vs HMAC security strength
@user1204481: so, how do you perform the attack without being able to get MACs of chosen messages?
Aug
10
awarded  Yearling
Aug
10
answered $(k, n)$ threshold secret sharing to $(k+k', n + n')$ without reissuing all shares
Aug
10
comment CMAC vs HMAC security strength
@user1204481: well, as above, it depends on what those operations are. If they require interaction with the system under attack, such an attack would appear to be less feasible than if that attack could be done entirely by the attacker.
Aug
10
reviewed Close AES256-CBC vs AES256-CTR in SSH
Aug
9
answered RSA Blind Signature Attack
Aug
9
answered Recover from compromised shares with Shamir Secret Sharing
Aug
8
answered CMAC vs HMAC security strength
Aug
8
revised Building a stream-cipher out of a hash function?
[Edit removed during grace period]
Aug
8
awarded  signature
Aug
7
reviewed Close How to decrypt 3DES in ECB mode (using a wordlist)?
Aug
6
reviewed Close Question about AES and Cryptsetup
Aug
5
reviewed Close Minimum length of PKI key for signature
Aug
5
reviewed Close How many degrees of freedom up my sleeve?
Aug
5
reviewed Close In symmetric searchable encryption are the algorithms public?
Aug
5
comment Homogenous and heterogeneous Unbalanced Feistel Networks
"The advantage of heterogenous UFNs is, that its internal properties change each round, making it more difficult to find specific characteristics which propagate through the different rounds" - is that correct? Or, does it make it harder to show that there is no such exploitable differential? Does the security of a heterogenous UFN depend on all (or at least, most) of the round functions? If so, why does using different ones make security better?
Aug
5
awarded  Enlightened
Aug
5
awarded  Nice Answer
Aug
4
comment About S-box in AES
@RichieFrame: nope, it's correct as it stands.
Aug
3
answered About S-box in AES