32,041 reputation
12567
bio website
location
age
visits member for 3 years, 3 months
seen yesterday

Jun
9
reviewed Close Which areas in CS will be (or have been) most affected by fully homomorphic cryptography?
Jun
9
comment DH key exchange with only one end authenticated
However, allowing Eve to imitate Alice might not be a security issue, depending on the scenario. Consider Amazon; they, as Bob, don't care who they are talking to, be it Alice or Eve. In this scenario, Bob (Amazon) doesn't check any signatures, because they don't care. Alice is the one who cares that she gives her credit card information to Amazon, and not Eve -- having Alice check Amazon's signature does that. Of course, there are other situations where having both sides authenticate the other is Very Important.
Jun
9
reviewed Approve suggested edit on Significance of rotation constants in SHA-512?
Jun
9
reviewed Approve suggested edit on ECDSA: Retrieving non-random k
Jun
8
reviewed Leave Open ECDSA: Retrieving non-random k
Jun
8
reviewed Approve suggested edit on Sender and receiver having different moduli conflicts with encryption and signing in RSA
Jun
8
answered How do I construct variable length input (VIL) in a block cipher mode?
Jun
8
reviewed No Action Needed How do I construct variable length input (VIL) in a block cipher mode?
Jun
8
revised ECDSA: How to retrieve a non-random k
Slightly more explicit
Jun
8
awarded  Custodian
Jun
8
reviewed Reopen What does it mean that a protocol realizes “strong mutual authentication”?
Jun
8
reviewed No Action Needed Are those RSA keys flawed?
Jun
8
answered ECDSA: How to retrieve a non-random k
Jun
7
reviewed Close What does it mean that a protocol realizes “strong mutual authentication”?
Jun
7
answered Why are there only positive value points on an elliptic curve?
Jun
6
comment What are differences between $E(F_p)$ and $E(Z_p)$?
The difference comes if you do ECC in an extension field; where the field size is $p^k$ for $k>1$. In that case, $Z_{p^k}$ would imply that you're doing your math modulo $p^k$, which would be incorrect (that's not a field). Instead, in that case $E(F_{p^k})$ would be the correct notation. Of course, nowadays we usually stick to prime fields; in that case both notations are equivalent.
Jun
5
revised Pick faster private exponent
deleted 1 character in body
Jun
5
answered Pick faster private exponent
Jun
5
comment How (in)secure is a signature based on DSA with DSS1 (SHA1) in reality?
@RichieFrame: collision resistance comes into play only if the attacker gets to pick the valid signed text and the forgery. CodeX said we was doing a license file; if he is the only one that generates the valid license files, and do not allow anyone else to "suggest" things, he need not care about collisions -- instead, he needs to worry about "second preimage" attacks. And, SHA-1 appears to be strong against that attack model.
Jun
5
revised Use of Different keys with PCBC
Extended explination