Reputation
37,610
Next tag badge:
99/100 score
25/20 answers
Badges
1 35 80
Newest
 Nice Answer
Impact
~552k people reached

Jan
23
revised How much work is required to detect multiple collisions for a hash function?
added 208 characters in body
Jan
23
answered How much work is required to detect multiple collisions for a hash function?
Jan
23
answered Should the nonce passed to GCM be authenticated?
Jan
23
comment Security aspects of using a global values as nonce and additional data for AES?
Is this question about cryptography, or is it about the design of an API to a function (which happens to perform a cryptographical task)?
Jan
23
answered Simple message authentication code
Jan
22
reviewed No Action Needed How does cryptanalysis of the Playfair cipher work?
Jan
21
comment BEAST attack confusion
@JOe: that is correct -- you don't need to wait for the browser to send a message; we have the Java applet send messages when we want.
Jan
21
reviewed No Action Needed wireless network security protocol
Jan
21
reviewed Close Is there a kind of OS entropy pool on Windows systems?
Jan
21
reviewed Leave Open wireless network security protocol
Jan
21
reviewed Approve wireless network security protocol
Jan
21
answered BEAST attack confusion
Jan
20
reviewed Leave Closed Automated testing of cipher security for import/export compliance
Jan
20
reviewed No Action Needed HMAC-Ripemd-160 in TrueCrypt
Jan
20
reviewed Looks OK Why are some $x$ coordinates unsuitable for an ECDSA generator point?
Jan
20
reviewed Reviewed Possible hashing scheme
Jan
19
reviewed No Action Needed chacha20-poly1305 padding and length encoding
Jan
19
reviewed No Action Needed RSA Key generation: How is multiplicative inverse computed?
Jan
17
comment RSA signing security
@RickyDemer: my bad; you are correct...
Jan
17
comment Performing HMAC with random key before MAC comparison
I can't think of anything else it would add to the security properties. Of course, there ought to be easier ways to do a constant time equality comparison; perhaps they are extremely paranoid about how "helpful" optimizing compilers can be.