33,614 reputation
12872
bio website
location
age
visits member for 3 years, 5 months
seen 2 hours ago

Sep
5
answered Base64 for a hash algorithm
Sep
5
reviewed Leave Open Can Bitcoin HD public keys be used for symmetric encryption?
Sep
4
comment Would xoring 2 independant AES CTRs to produce p-rand introduce vulnerabilities?
@John: no, there are cleverer ways to recover the initial state. However, if you use AES-256, any such method would have to start out with "try to find a 256 key which...", which is completely infeasible. Of course, is there a specific reason why you just don't do simple counter mode with a single AES-256 key?
Sep
4
reviewed Approve ECIES: Purpose of MAC?
Sep
4
answered Would xoring 2 independant AES CTRs to produce p-rand introduce vulnerabilities?
Sep
4
reviewed Close Cracking WWII-era codes - code found on a pigeon's leg in Surrey
Sep
4
comment ECIES: Purpose of MAC?
@tryagain: However, should could not compose "Transfer one million into Eve's account, password Rhinosaurus" if she doesn't know the password. That's the point of the example; by modifying the message, she doesn't have to know it.
Sep
4
comment ECIES: Purpose of MAC?
@tryagain: look at the example I gave above; it is actually secure. Eve could not generate the message, because she doesn't know the password. Or, are you saying that ECIES should have been designed with a known weakness (message malleability) because that weakness is likely to be covered by how it is used?
Sep
4
answered ECIES: Purpose of MAC?
Sep
3
comment What are options to compute DES retail MAC (aka ISO 9797-1 mode 3) under PKCS#11?
Are you intending to use this in a real product? There's an obvious key recovery attack with $2^{32}$ known plaintext/MACs and $2^{57}$ work; that's too close to practical for me...
Sep
3
comment Encryption-Decryption-Encryption
@CodesInChaos: hey, if I hadn't bothered typing in all of "This isn't a quite a duplicate...", I would have been first :-)
Sep
3
comment Encryption-Decryption-Encryption
This isn't quite a duplicate, however a related question (specific to DES) is crypto.stackexchange.com/questions/2060/…
Sep
3
reviewed Close What is the exact purpose of length padding in Merkle–Damgård hash functions?
Sep
2
reviewed Close How Proof all Subgroup point of prime order elliptic curve have prime order [#G=#E]?
Sep
2
reviewed Leave Open How to make a document truly read only
Sep
2
reviewed Close How should I treat a new cipher release like Spritz?
Sep
2
comment Prevent MITM attack while encrypting data by using ElGamal ECC?
That rather depends on the goals of the man-in-the-middle. Is it a) to read what you sent (in which case DrLecter's advice is the correct answer), or b) to replace your message with his own (which ElGamal does nothing to prevent; you'll need to sign/MAC your message to prevent that)
Aug
30
reviewed Close Do any non-US ciphers exist?
Aug
30
reviewed Looks OK What is the most secure hand cipher?
Aug
29
reviewed Close How does Random Oracle and Standard Model differ?