Reputation
338
Next privilege 500 Rep.
Access review queues
Badges
1 7
Newest
 Nice Answer
Impact
~3k people reached

  • 0 posts edited
  • 0 helpful flags
  • 33 votes cast
Mar
13
answered Do any cryptography algorithms work on numbers besides primes?
Feb
26
comment Remove padding (CBC) from decrypted text
Hasn't been maintained for years but is unfortunately heavily used.
Feb
26
comment Remove padding (CBC) from decrypted text
Not all padding includes a padding length, PHP mcrypt only supplies null padding.
Jan
16
awarded  Nice Answer
Jan
16
awarded  Yearling
Jan
16
comment Are there any advantages in using proprietary encryption?
... more: There is of course another threat to standard algorithm, that of a government tampering with the them. The NSA proposed changes to the S-boxes of DES, it is not know why, no explanation was given. Then there is the Dual_EC_DRBG controversy.
Jan
16
comment Are there any advantages in using proprietary encryption?
It is true that open software is not necessarily more free of bugs but algorithms such as AES which were exceptionally well vetted through a rigorous completion and even after well studied should be substantially better vetted than a proprietary algorithm that has not have nearly the scrutiny. Further implementations that are FIPS certified have had their code critically examined. It is true that well funded governments, for example, have the facilities, time and talent to produce proprietary algorithms that rival or exceed standards but are the exception an not under consideration here.
Jan
16
awarded  Critic
Jan
15
comment Are there any advantages in using proprietary encryption?
The relevelent question is about current "best practice" ciphers such as AES and has "their effective security down to a brute-forcable range". The edited question does not address the comment which still seems to be more FUD that useful.
Jan
15
comment Practical attack on an impractical implementation of Rijndael (AES?)
My comment was directed toward the answer and the general statement about ECB mode in the last sentence.
Jan
15
comment Are there any advantages in using proprietary encryption?
There is also Schneier's Law: "Anyone, from the most clueless amateur to the best cryptographer, can create an algorithm that he himself can't break."
Jan
15
revised Are there any advantages in using proprietary encryption?
edited body
Jan
15
answered Are there any advantages in using proprietary encryption?
Jan
15
comment Practical attack on an impractical implementation of Rijndael (AES?)
ECB mode does allow information to be leaked, see The Penguin. If there is repeated data within a single message information can be gained.
Jan
15
awarded  Editor
Jan
15
awarded  Commentator
Jan
13
comment Generating a key to use with AES
It is possible to have a system where the files do not need to be re-encrypted for a passphrase change and it is not difficult. Since you want ownership of the method think about that and you can figure out the solution. The solution is similat to how you can have two different passwords for the same file.
Jan
13
comment Generating a key to use with AES
@Halen One further consideration: Since you will be encrypting many files for the long term consider how you would handle the passphrase being compromised. A good system will allow you to change the passphrase without having to decrypt and re-encrypt all the files. Consider that many files may be saved in many places and several duplicates as backup.
Jan
13
comment Generating a key to use with AES
The question to ask oneself is do I want good security of the thrill of writing my own crypto system? If the first consider using RNCryptor or in the second case take a look at the RNCryptor Design Considerations and Data Format. For more depth see Practical Cryptography by Niels Fergusson & Bruce Schneider.
Jan
13
comment Should I use RSA encryption since RSA is said to be broken by NSA?
@MeysamGhahramani What makes you think that Elliptic curve is more secure than RSA?