365 reputation
4
bio website
location
age
visits member for 4 months
seen 21 hours ago
stats profile views 2

May
19
comment Is this algorithm secure?
That's right; provided the password is there in full in the input to HMAC (if HMAC is being used with a standard hash algorithm), adding additional entropy-less data doesn't lower the entropy of the output.
May
19
answered Is this algorithm secure?
May
18
revised Is Base64(SHA1(GUID)) still unique like the original GUID?
remove length per Paulo's comment
May
18
comment When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
Thanks Watson, please do edit the answer.
May
17
answered Is Base64(SHA1(GUID)) still unique like the original GUID?
May
17
answered When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
May
16
revised Help me describe/identify this challenge-response protocol/algorithm?
defaultdict
May
16
awarded  Editor
May
16
revised Help me describe/identify this challenge-response protocol/algorithm?
generate random vector
May
16
answered Help me describe/identify this challenge-response protocol/algorithm?
Apr
8
comment How secure is this perl script to use an AES encryption on files?
With no parameter checking, the script isn't robust when called without a passphrase. It will encrypt with the key set to the md5 of the null string with no error returned, which is likely a security issue.
Feb
25
awarded  Critic
Feb
25
comment Deriving HMAC key and cipher key from passphrase?
Never roll your own crypto.
Feb
24
answered Bad/Crackable Encryption Example?
Feb
16
answered RSA SHA1 signature from public key
Jan
25
answered Secure communication between multiple peers on a public channel
Jan
23
awarded  Supporter
Jan
23
comment Any efficient text-based steganographic schemes?
By user friendly I meant easy for a human to decode unaided (just read off the relevant letters), and relatively easy for a human to construct unaided (think up appropriate words to start sentences). These properties disappear if you use the encrypted variant I proposed.
Jan
23
answered How to generate a key using any m passwords out of total n?
Jan
23
awarded  Teacher