879 reputation
114
bio website
location
age
visits member for 1 year, 11 months
seen 2 days ago

Dec
3
comment Can a secret message be securely transmitted within a MAC tag?
I've updated my answer to address the code book and MAC scheme separately. My answer doesn't say that this scheme is insecure - indeed it states just the opposite! The 'don't roll your own' axiom remains true though; I've clarified that it applies to production systems.
Dec
3
revised Can a secret message be securely transmitted within a MAC tag?
address code book and MAC scheme separately
Nov
30
comment RFC 6979 - Why not simply hash the message & the private key for deterministic ECDSA?
It decouples the output length of the hash function from the required length of k. I would have said it was to provide security even in the presence of a collision in the hash function, but I don't think it does.
Nov
30
comment Can a secret message be securely transmitted within a MAC tag?
Thanks, fixed the length. The actual data sent is of very restricted size, which is what I am referring to by 'message'. How this message is interpreted is up to the system it exists in as you point out. I wouldn't recommend using this non-standard approach - I've updated my answer to reflect this.
Nov
30
revised Can a secret message be securely transmitted within a MAC tag?
fix ciphertext length; add recommendation not to use
Nov
27
answered Can a secret message be securely transmitted within a MAC tag?
Jun
25
awarded  Popular Question
Feb
23
answered Standard or guidance for entropy collection
Jan
7
awarded  Yearling
Dec
19
awarded  Nice Answer
Oct
20
answered Does MAC provide origin authentication? Why not just use symmetric encryption?
Oct
17
revised Any efficient text-based steganographic schemes?
name scheme
Oct
14
revised Technical feasibility of decrypting https by replacing the computer's PRNG
Update following release of Becker et al's paper on dopant-level trojans
Sep
8
comment Which PRNG security requirements do I need for key generation
"get a hardware random number generator" or get two, one each from two countries whose governments distrust each other...
Sep
8
revised Technical feasibility of decrypting https by replacing the computer's PRNG
update to allow for being compelled by the govt to insert backdoor
Aug
28
awarded  Citizen Patrol
Aug
24
comment What current authenticated key exchange standards exist?
Yes, though the schemes specified in SP800-56A are not complete protocols, they are relevant.
Aug
19
answered Why are HOTP and TOTP implementations all using 6 digits and not more?
Aug
18
awarded  Scholar
Aug
18
accepted Pre-image resistant but not 2nd pre-image resistant?