32,536 reputation
12669
bio website
location
age
visits member for 3 years, 4 months
seen 4 mins ago

Jul
14
reviewed No Action Needed mixing two asymmetrical random number generator streams
Jul
12
answered How does recovering the public key from an ECDSA signature work?
Jul
12
comment Effective security of block cipher – equal the key size, or half the key size?
I don't have the book, but might Viega and Messier have actually said "the effective strength ... is actually half the block size"; which might be one way of expressing that if you have a block cipher with a block size of $n$ bits, you generally don't want to use it for more than $2^{n/2}$ blocks ???
Jul
12
answered Is jacobian to projective conversion unique?
Jul
10
comment Calculating IHVs from known message and hash output
@DmitryYanushkevich: no, there is not. In fact, the existence of a method that could solve it in, say, 2^150 steps, could be used to find preimages in 2^156 steps (for SHA-1).
Jul
10
answered Calculating IHVs from known message and hash output
Jul
10
reviewed No Action Needed How can a Vigenère cipher be broken if the message is short?
Jul
10
reviewed Close CBC-MAC length extension attack with IV simulation
Jul
9
comment Random Number Generator based on AES CTR
If you have anything that shows that CTR_DRBG is computationally distinguishable from a truly random source (given an unknown seed), I would strongly urge you to publish it. I am personally skeptical that you have any such evidence.
Jul
9
comment Random Number Generator based on AES CTR
Have you considered the CTR_DRBG from csrc.nist.gov/publications/nistpubs/800-90A/SP800-90A.pdf ; that's mostly your idea, with the details worked out
Jul
8
answered How is this affine function a pair wise independent permutation?
Jul
8
reviewed No Action Needed What exactly does a key do?
Jul
8
reviewed Leave Open How is the MD2 hash function S-table constructed from Pi?
Jul
7
reviewed Close Where can I begin to study the math behind modern cryptography?
Jul
7
reviewed Approve sha-2 tag wiki
Jul
6
comment Generate Finite Field power of g
Is the question "what is meant by the notation $g^x$"? Or, is the question "how do you do multiplication in the field $GF(16)$"?
Jul
6
reviewed No Action Needed Generate Finite Field power of g
Jul
6
reviewed No Action Needed Type 2 to Type 1 pairing transformation - why not considered?
Jul
5
comment Use ElGamal to solve Diffie-Hellman problem
@CGFoX: well, $z$ is from the ciphertext, and you get to pick that, so of course you can... (I almost mentioned that myself; I'm glad I didn't; it's better that you thought of it)
Jul
4
comment Use ElGamal to solve Diffie-Hellman problem
@CGFoX: stop at $(g^{xy})^{-1} \cdot z$; do you know the value $z$?