3,181 reputation
21228
bio website
location
age
visits member for 2 years, 9 months
seen Apr 16 at 7:24

Apr
9
comment Should we MAC-then-encrypt or encrypt-then-MAC?
@Clément I have had a go at explaining the difference via a separate question, see crypto.stackexchange.com/q/15485/46 - feel free to ask for clarification there :)
Apr
9
asked Why do we encrypt-then mac but sign-then-encrypt?
Apr
9
answered Why do we encrypt-then mac but sign-then-encrypt?
Mar
30
comment Should we MAC-then-encrypt or encrypt-then-MAC?
@clement it is a good point although I don't think you'd use a mac for identity verification... but there are definitely those who disagree that encrypt-then-mac is the best solution and their arguments are very very valid too.
Mar
24
comment Should we MAC-then-encrypt or encrypt-then-MAC?
@Clément I'll give it a look in the next few days - currently moving countries and don't want to post a hurried answer as I think if I'll do I'll end up tripping over the subtleties of it.
Dec
22
awarded  Good Answer
Dec
17
awarded  Nice Answer
Oct
18
comment What exactly is the impact of the hidden subgroup problem on cryptography?
@curious if that's a question, feel free to fill it out a bit and ask it :) You just need to hit the ask question button. If it's an answer, I'd love to hear more of it, feel free to answer below. Even Qs with accepted answers can be improved upon.
Sep
19
revised Should I use ECB or CBC encryption mode for my block cipher?
added 1264 characters in body
Sep
19
comment Should I use ECB or CBC encryption mode for my block cipher?
@owlstead I'll expand on it, give me a bit.
Jul
25
awarded  Nice Question
Jul
21
awarded  Nice Answer
Jul
15
awarded  Popular Question
Jul
12
awarded  Yearling
May
17
awarded  Guru
May
5
awarded  Nice Answer
Apr
24
awarded  Nice Answer
Feb
11
comment Counter Mode in Advanced Encryption Standard(AES) Algorithm
@Bulat CTR's not all that intuitive. As you say, the plain text of the block cipher primitive is in fact shared in this case (the IV+nonce). In the NIST article, you're looking for the recommendation to use $b/2$ where $b$ is the block size of the cipher - i.e. 128 for all AES variants. They do also recommend using full-block nonces - see Paulo's comments on those.
Feb
11
comment Counter Mode in Advanced Encryption Standard(AES) Algorithm
@Bulat well, it is quite often implemented that way as recommended by NIST (Appendix B.2) and no, it does not make the encryption 64-bit. There is still a 128, 192 or 256 bit key on which the security of the system depends.
Feb
4
awarded  Custodian