31,942 reputation
12566
bio website
location
age
visits member for 3 years, 3 months
seen 42 mins ago

May
21
revised Simple way to extend AES to 256-bit block size
edited tags
May
21
answered Message lengths with AES CTR mode?
May
21
reviewed Reject suggested edit on Shamir Secret sharing - Can share generator keep x values secret?
May
21
reviewed Reject suggested edit on Shamir Secret sharing - Can share generator keep x values secret?
May
21
awarded  Nice Answer
May
21
reviewed Looks OK Which concrete applications benefit from Oblivious RAM constructions?
May
21
reviewed Leave Open Which concrete applications benefit from Oblivious RAM constructions?
May
21
reviewed No Action Needed One-time pad, zero key and Shannon
May
21
comment Which tamper-protection algorithm provides the shortest output?
@Bohemian: if you care about integrity, you need to add something that actually gives an integrity guarantee. Common encryption modes, such as CBC or CTR, do not.
May
21
reviewed Approve suggested edit on oblivious-ram tag wiki excerpt
May
21
reviewed Approve suggested edit on oblivious-ram tag wiki
May
21
comment Is AES-256 over AES-128 weakening the original encryption?
@otus: yes, exactly the same result. If the outer encryption is vulnerable to a chosen plaintext attack, one could choose a plaintext that consist of an AES-128 encrypted file -- hence if that combination is weak, then the outer encryption is vulnerable to a chosen plaintext attack. If you disagree, then please point out where in the outlined proof I am wrong.
May
21
comment Is AES-256 over AES-128 weakening the original encryption?
@otus: actually, if you analyze the outer encryption strength in terms of chosen plaintext attacks, the exact same result applies.
May
21
answered Is AES-256 over AES-128 weakening the original encryption?
May
21
reviewed Leave Open Common password derivation function for different encryption methods
May
21
reviewed No Action Needed Prefix property for variable length pseudo-random generators
May
21
reviewed Leave Open Berlekamp-Massey algorithm, correct stepping
May
20
reviewed Close encryption and decryption time for RSA-crt in java?
May
20
revised how to use common modulus attack?
edited tags
May
20
comment Advantages to knowing $p$ and $q$ in Blum Blum Shub?
I believe the question was "what advantage would the legitimate generator have in retaining $p$ and $q$", not "if an adversary learned $p$ and $q$, how can they attack it"