1,485 reputation
1416
bio website
location Madrid, Spain
age
visits member for 1 year, 7 months
seen 2 hours ago

Apr
8
comment SHA256-based stream cipher
+1 for pointing out the lack of authentication. AES-GCM seems like a much better option.
Apr
8
comment SHA256-based stream cipher
Unbreakable? That's a bold claim.
Apr
7
comment Convert SpookyHash to semi-secure 192bit hash
@e-sushi - you understood perfectly well ;-)
Apr
7
answered Secure AES Key Generation via Salsa20?
Apr
7
comment Convert SpookyHash to semi-secure 192bit hash
"How secure will this function be?" Semi.
Apr
5
comment Wrong Test Vector for HKDF with HMAC-SHA256
I can also confirm that I'm getting the expected results as per that test vector
Apr
4
answered What is the difference between authenticating and signing a document?
Mar
27
comment Is Curve25519-java secure?
@CodesInChaos - are the signatures in Curve25519-java not deterministic? Maybe I'm missing something, but I thought they were.
Mar
27
comment Difference between lightweight, online and low memory Authenticated Encryption schemes
@figlesquidge .. +1
Mar
21
comment Difference between lightweight, online and low memory Authenticated Encryption schemes
@figlesquidge - I guess the question being closed because it's "unclear what you're asking" suffices in lieu of comments. I second Rath's comment. In my opinion, the question seems extremely vague, and too broadly open to interpretation. Adding some links, references, and/or previous research to the question might help provide context, and make the question answerable. However, if this question seems clear to you - go ahead and answer it.
Mar
10
comment Breaking Double Encryption
Related reading...
Mar
6
answered Is it overkill to run a key generated by OpenSSL through pbkdf2?
Mar
5
comment Entropy of Androids motion-sensor data
I disagree with those who say this is off-topic (although you might want to get rid of the code, as it's superfluous to your question). You're basically asking whether external input collected via a device's sensors has high entropy, and is suitable for feeding into a well-vetted CSPRNG. You should check out this question ... I would say the same principles apply.
Jan
30
comment Best way to get 32 bytes from PBKDF2
If you just want to use a single primitive (ie, PBKDF2), I'd recommend reading D.W's excellent answer here: crypto.stackexchange.com/questions/8232/…
Jan
13
awarded  Popular Question
Jan
3
awarded  Popular Question
Dec
19
awarded  Yearling
Dec
10
awarded  Notable Question
Nov
29
comment What would make it impossible to deny that decryption of a package has taken place?
I don't think this is strictly possible with crypto alone... it's more of a software/protocol problem. If you can assume that the server only delivers the data to be decrypted once the user has been authenticated, and that decrypting the data is trivial (ie, that particular user has the key to decrypt it), then it's probably safe to say that the data has been decrypted by that user, meaning that the server can make a note of it's retrieval/decryption. Vaguely related are time-sensitive crypto questions here and here.
Nov
28
comment What is 'key agility' in relation to symmetric-key encryption?
Poor key agility can be an advantage in some situations. The slow/expensive key initialization (ie, key agility) in Blowfish means that it's more immune to brute-force attacks.