1,538 reputation
1416
bio website
location Madrid, Spain
age
visits member for 1 year, 11 months
seen 7 hours ago

1d
comment How to establish if a string contains a message
see here for some relevant reading...
Nov
22
comment PHP secure random number generator
/dev/urandom already does the generation of cryptographically secure random bytes... it seems as though your question is simply about how to format/process that output.
Nov
22
comment PHP secure random number generator
This is a question about programming, not cryptography
Nov
10
comment Extending key sizes in Salsa20 and ChaCha?
@John - "So.. if you can extend the key size, without impacting performance, why not do it?" Because you're not a trained cryptographer and you may well end up making the algorithm weaker, not stronger.
Nov
9
comment Extending key sizes in Salsa20 and ChaCha?
"Is there something I'm not seeing here" ? Yes... extending the key beyond 256 bits is entirely redundant.
Nov
4
comment The use of the term “sound” in cryptography
Context and/or reference, please.
Sep
14
comment Hashing passwords
The first option should absolutely not be used. As for the second, see PBKDF2
Sep
2
comment Is MAC algorithm same at both sender and receiver end
Cursory research should answer your questions
Aug
28
comment Choice of authenticated encryption mode for whole messages
@Gilles - be sure to check out this article
Aug
25
comment Found a way to crack AES-128, what now?
@poncho - yeah I know... I'm not really taking this claim seriously.
Aug
25
comment Found a way to crack AES-128, what now?
Prove it. Algo = AES-128. Mode = CTR. Nonce (hex) = 9f22f26e4285f9cf69f19eabccde81c7. Ciphertext = 683a5a98232f31fe3580f0c5bb104a03e8acfd7e0cb763ae844858af48d929a28156f41f1c18a580‌​94. The plaintext is a simple sentence in English. The key you'll have to figure out for yourself... get back to us in 1-2 days? ;-)
Jul
21
comment Use AES-256 Or AES-CTR-256 For One Block?
@srgblnch - indeed.
Jul
19
comment OCB nonce usage
Thanks for the extra insight - it's appreciated.
Jul
18
comment OCB nonce usage
Ah - good catch! That simplifies matters.
Jul
17
comment How long does it take to crack PBKDF2?
Have you done any prior research regarding this topic?
Jun
26
comment Large text file encryption per line
@user3770896 - I don't get it either. The only reason you would hash and/or encrypt the column (from what I understand) is if doing so would protect the identity of the person it pertains to. However, you've stated that the column is a random string. Anyway, mysql has native hash and encryption (AES-128-ECB, be careful with that) functions. Doing joins using those functions is trivial... software for this purpose would be a bit over the top.
Jun
26
comment Large text file encryption per line
This question appears to be off-topic because it is about programming
Jun
26
comment Large text file encryption per line
This is off-topic here — it's a programming question. By the way it sounds like you're looking for a hash function, not an encryption function.
May
31
comment Update to “Cryptographic Right Answers”
Even if SHA-3 were finalized, I still wouldn't recommend switching to it. SHA-2 has seen far more analysis and is still going strong today.
May
29
comment What's the advantage of using OFB/CFB/CTR modes over a stream cipher
@K.G. - how so? Just a simple counter will do.