869 reputation
114
bio website
location
age
visits member for 1 year, 9 months
seen Oct 28 at 20:12

Jul
11
comment Is FIPS 140-2's “Continuous random number generator test” practical?
Let us know what your lab says.
Jul
8
comment What current authenticated key exchange standards exist?
Thanks Ricky, but I'm now specifically looking for standards (NIST, ISO, IETF,...), not just proposals in the literature.
Jul
6
comment Using a Hash as a secure PRNG
Reseeding and support for arbitrary output lengths are some of the reasons why the specification for Hash_DRBG is longer than your specification, which is why I pointed them out.
Jul
6
answered Using a Hash as a secure PRNG
Jul
4
revised What current authenticated key exchange standards exist?
rework questin to focus on what standards are available and currently considered secure
Jul
3
revised When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
incorporate reference, restore (modified) conclusion
Jul
1
awarded  Commentator
Jul
1
awarded  Student
Jun
30
asked What current authenticated key exchange standards exist?
Jun
30
awarded  Custodian
Jun
30
reviewed Satisfactory Is Base64(SHA1(GUID)) still unique like the original GUID?
Jun
20
comment When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
forgot to ping @Watson for requested edit
Jun
10
comment Is it possible to anonymize web traffic so that the IP Address cannot be determined while still being able to determine distinct IPs?
The deterministic encryption scheme doesn't meet the first requirement - given an IP address, an attacker can compute the ciphertext and then determine what requests came from that address.
Jun
2
answered What are the requirements of a nonce?
May
28
revised How to verify a shared secret using only AES?
specify size of P to avoid mode issues
May
28
comment How to verify a shared secret using only AES?
Indeed; suggested update to answer to make that constraint clear.
May
28
suggested suggested edit on How to verify a shared secret using only AES?
May
28
comment How to verify a shared secret using only AES?
Be careful if you choose an unauthenticated mode to encrypt P_own||P_other - for example if you use CTR (or CFB with a 1 block size message) an attacker can subvert the protocol by computing E(k, P_b||P_a) from P_a, P_b and E(k,P_a||P_b); if using ECB and P_a and P_b are each a multiple of the block size, a trivial rearranging of the messages is all that is needed.
May
28
answered Which keys are necessary to decrypt Application data in a SSL connection?
May
19
comment Is this algorithm secure?
That's right; provided the password is there in full in the input to HMAC (if HMAC is being used with a standard hash algorithm), adding additional entropy-less data doesn't lower the entropy of the output.