152 reputation
110
bio website google.com
location Stack Overflow
age 30
visits member for 1 year, 4 months
seen 18 hours ago

I post stuff on stackoverflow and want a free profile badge for filling out this section :D


Dec
26
reviewed Excellent Why is sharing the seed and using SecureRandom “deterministically” so bad?
Dec
26
reviewed Excellent Are there any differences in operation between existing Diffie-Hellman specifications?
Dec
26
reviewed Satisfactory Diffie-Hellman Secret Exponent Size and Shared Secret Usage
Dec
26
awarded  Custodian
Dec
26
reviewed Satisfactory Homomorphic (encrypted) comparison to an integer
Dec
26
reviewed Excellent Blinding twice in RSA
Dec
26
reviewed Excellent Is the following aggregation scheme private?
Oct
4
awarded  Critic
Sep
20
asked blinding a hash vs. sending the hash directly
Sep
20
comment PKCS1 and blind RSA signatures
@CodesInChaos - that jibes with my understanding. Although I'm not sure why a probabilistic padding scheme would be bad? I'm also unsure of why, when you already have a hash, blinding is necessary, since the hash pretty much obscures the message already. I guess I'll start a new question for that lol
Sep
18
comment PKCS1 and blind RSA signatures
Also, it seems to me that it necessarily needs to be broken up anyway. If you were going to sign the message wouldn't be a blind signature. It'd be a regular signature. So you pad the message, don't do RSA, blind it, and then send it off to the signer for them to sign it. But since they're signing a blinded message they wouldn't know what the original message was. Of course since you're sending a padded hash it seems to me that they wouldn't know what the orig message was anyway. Unless I'm totally misunderstanding blind signing.
Sep
18
comment PKCS1 and blind RSA signatures
You do EMSA-PKCS1-V1_5-ENCODE, blind and then do modular exponentiation. RSASSA-PKCS1-V1_5-SIGN is EMSA-PKCS1-V1_5-ENCODE and modular exponentiation. Blinding has to be done in the middle of those two, it seems to me, hence my saying you have to side-step RSASSA-PKCS1-V1_5-SIGN.
Sep
17
comment PKCS1 and blind RSA signatures
I'm not proposing unpadded rsa. I'm proposing doing EMSA-PKCS1-v1_5-ENCODE but not the full blown RSASSA-PKCS1-V1_5-SIGN
Sep
17
asked PKCS1 and blind RSA signatures
Apr
27
awarded  Enthusiast
Apr
23
awarded  Suffrage
Apr
23
awarded  Vox Populi
Apr
22
awarded  Informed
Mar
26
awarded  Analytical
Dec
15
comment creating a small number from a cryptographically secure random string
I think you're right Thomas in that a typo was made. With (N / K) * K the K's would cancel each other out leaving you with N, which X is already pretty much guaranteed to be less than.