154 reputation
111
bio website google.com
location Stack Overflow
age 31
visits member for 1 year, 10 months
seen Oct 17 at 4:16

I post stuff on stackoverflow and want a free profile badge for filling out this section :D


Oct
17
accepted blowfish ecb with openssl doesn't give the expected result
Oct
17
asked blowfish ecb with openssl doesn't give the expected result
Oct
7
asked side channel attacks on AES
Aug
6
awarded  Popular Question
Dec
26
reviewed Excellent Why is sharing the seed and using SecureRandom “deterministically” so bad?
Dec
26
reviewed Excellent Are there any differences in operation between existing Diffie-Hellman specifications?
Dec
26
reviewed Satisfactory Diffie-Hellman Secret Exponent Size and Shared Secret Usage
Dec
26
awarded  Custodian
Dec
26
reviewed Satisfactory Homomorphic (encrypted) comparison to an integer
Dec
26
reviewed Excellent Blinding twice in RSA
Dec
26
reviewed Excellent Is the following aggregation scheme private?
Oct
4
awarded  Critic
Sep
20
asked blinding a hash vs. sending the hash directly
Sep
20
comment PKCS1 and blind RSA signatures
@CodesInChaos - that jibes with my understanding. Although I'm not sure why a probabilistic padding scheme would be bad? I'm also unsure of why, when you already have a hash, blinding is necessary, since the hash pretty much obscures the message already. I guess I'll start a new question for that lol
Sep
18
comment PKCS1 and blind RSA signatures
Also, it seems to me that it necessarily needs to be broken up anyway. If you were going to sign the message wouldn't be a blind signature. It'd be a regular signature. So you pad the message, don't do RSA, blind it, and then send it off to the signer for them to sign it. But since they're signing a blinded message they wouldn't know what the original message was. Of course since you're sending a padded hash it seems to me that they wouldn't know what the orig message was anyway. Unless I'm totally misunderstanding blind signing.
Sep
18
comment PKCS1 and blind RSA signatures
You do EMSA-PKCS1-V1_5-ENCODE, blind and then do modular exponentiation. RSASSA-PKCS1-V1_5-SIGN is EMSA-PKCS1-V1_5-ENCODE and modular exponentiation. Blinding has to be done in the middle of those two, it seems to me, hence my saying you have to side-step RSASSA-PKCS1-V1_5-SIGN.
Sep
17
comment PKCS1 and blind RSA signatures
I'm not proposing unpadded rsa. I'm proposing doing EMSA-PKCS1-v1_5-ENCODE but not the full blown RSASSA-PKCS1-V1_5-SIGN
Sep
17
asked PKCS1 and blind RSA signatures
Apr
27
awarded  Enthusiast
Apr
23
awarded  Suffrage