3,701 reputation
21332
bio website
location
age
visits member for 3 years, 3 months
seen Oct 14 at 21:11

May
6
comment Security benefits of Ed25519 generating signatures deterministically
@Brock thanks, yes, I am not sure why I left 'actually a field' in there. Thanks for pointing that out!
May
5
comment Security benefits of Ed25519 generating signatures deterministically
@noloader no worries. I wasn't sure so I clarified just in case - you never know.
Apr
9
comment Should we MAC-then-encrypt or encrypt-then-MAC?
@Clément I have had a go at explaining the difference via a separate question, see crypto.stackexchange.com/q/15485/46 - feel free to ask for clarification there :)
Mar
30
comment Should we MAC-then-encrypt or encrypt-then-MAC?
@clement it is a good point although I don't think you'd use a mac for identity verification... but there are definitely those who disagree that encrypt-then-mac is the best solution and their arguments are very very valid too.
Mar
24
comment Should we MAC-then-encrypt or encrypt-then-MAC?
@Clément I'll give it a look in the next few days - currently moving countries and don't want to post a hurried answer as I think if I'll do I'll end up tripping over the subtleties of it.
Oct
18
comment What exactly is the impact of the hidden subgroup problem on cryptography?
@curious if that's a question, feel free to fill it out a bit and ask it :) You just need to hit the ask question button. If it's an answer, I'd love to hear more of it, feel free to answer below. Even Qs with accepted answers can be improved upon.
Sep
19
comment Should I use ECB or CBC encryption mode for my block cipher?
@owlstead I'll expand on it, give me a bit.
Feb
11
comment Counter Mode in Advanced Encryption Standard(AES) Algorithm
@Bulat CTR's not all that intuitive. As you say, the plain text of the block cipher primitive is in fact shared in this case (the IV+nonce). In the NIST article, you're looking for the recommendation to use $b/2$ where $b$ is the block size of the cipher - i.e. 128 for all AES variants. They do also recommend using full-block nonces - see Paulo's comments on those.
Feb
11
comment Counter Mode in Advanced Encryption Standard(AES) Algorithm
@Bulat well, it is quite often implemented that way as recommended by NIST (Appendix B.2) and no, it does not make the encryption 64-bit. There is still a 128, 192 or 256 bit key on which the security of the system depends.
Jun
26
comment Getting started
...the more arguments for it, the more we can get better tools from the team, etc :)
Jun
26
comment Getting started
@Matteo well... the official answer is that we should use tag wikis like this one. As mods, we can create community wiki posts, and we've had a bit of a debate on that already. I like the idea conceptually, but I've seen it work out... badly. There's been requests to make tag wikis better too. Feel free to raise a meta post arguing your case...
Jun
24
comment Getting started
I've closed this as being a list-of question, which we generally don't allow here. That said, I've mentioned this to other moderators in chat, as we persistently get these questions (our first was one) and we've debated allowing them before, so this could be re-opened (and you can still see the answers given anyway).
Jun
18
comment Why are there $ signs in my passwd file?
This question on U&L might help, too: unix.stackexchange.com/questions/8229/…
Jun
15
comment Assistance Cracking Classical Cipher
I agree with the others on providing a little explanation as to how you decoded this. I don't think it needs to be a step by step guide, but a brief overview of what you did would no doubt steer the OP in the right direction :)
May
30
comment Applying multiple hash functions to improve security?
I've closed this for now as a duplicate of the other question, the discussion on there should help I hope :) If your question is different (and I'm just not seeing it), do feel free to edit/reply to me here and we can look at re-opening it.
May
25
comment After implementing a novel encryption algorithm, how would one go about analyzing its security or get help from others in doing so?
Guys, just a friendly note - if you're providing an answer to a question, use the answer box, not the comment box. Big hint - some of these comments are semi answers! :)
May
23
comment Is it secure to use the hash of key as the IV in AES encryption?
Welcome to crypto; your question was migrated here by the SO mods as it is a better fit here. Feel free to register here to receive notification of your responses :)
May
16
comment ECIES protocol - what does the || operation mean?
@eXPi yep. It also means, in this case, that the output of the KDF is split into two parts - one part for each key.
May
16
comment Assistance Cracking Classical Cipher
Also, if you feel the FAQ can be improved, do weigh in on meta :)
May
16
comment Assistance Cracking Classical Cipher
As I wrote that FAQ, I'll weigh in with what I think - the "challenge people to decode something" was meant to deal with "please decode XYZ bet you can't !11!!1"-type questions, of which we've had a few. It's not meant to discourage questions which are a decent attempt at cryptanalysis, although I think they do need to be reasonably answerable. As is, I think we could do with as much information as you can give - perhaps the results of your frequency analysis, for example? However, I don't see the need to fire a mod close vote at it, although the community or other mods may disagree :)