Michael

355 reputation

	355 reputation	bio	website		visits	member for	4 months
4 badges		location			seen	4 hours ago

5 Comments

May 19	comment	Is this algorithm secure? That's right; provided the password is there in full in the input to HMAC (if HMAC is being used with a standard hash algorithm), adding additional entropy-less data doesn't lower the entropy of the output.
May 18	comment	When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible? Thanks Watson, please do edit the answer.
Apr 8	comment	How secure is this perl script to use an AES encryption on files? With no parameter checking, the script isn't robust when called without a passphrase. It will encrypt with the key set to the md5 of the null string with no error returned, which is likely a security issue.
Feb 25	comment	Deriving HMAC key and cipher key from passphrase? Never roll your own crypto.
Jan 23	comment	Any efficient text-based steganographic schemes? By user friendly I meant easy for a human to decode unaided (just read off the relevant letters), and relatively easy for a human to construct unaided (think up appropriate words to start sentences). These properties disappear if you use the encrypted variant I proposed.