606 reputation
46
bio website coderscentral.blogspot.com
location Colorado Springs, CO
age 50
visits member for 3 years, 3 months
seen Nov 11 at 22:37

Started programming on a Control Data mainframe in FORTRAN IV, back when that was still a new thing. Was apparently quite masochistic, because I kept programming anyway. For that matter, I still do...

Gold C++ badge #20
Gold C badge #12
Legendary badge #35


Oct
21
awarded  Yearling
Jan
18
comment In what way is XXTEA really vulnerable?
I would tend to look at it from the other direction: do you have a specific reason to use something other than AES? If not, that's an obvious and safe choice (with many freely-available implementations).
Sep
26
comment How much does a successful Distinguishing Attack “break” the attacked stream cipher?
Google for "traffic analysis" for some ideas about how the traffic can be used without decryption, but only if you can distinguish real traffic from random trash.
Aug
12
awarded  Yearling
Jun
10
awarded  Nice Answer
Aug
12
awarded  Yearling
Jun
11
comment What algorithm would give the shortest ciphertext for very short plaintexts?
@JoelFan: A fixed IV defeats the purpose of having an IV at all. To be useful, each IV must be unique.
Jun
11
revised What algorithm would give the shortest ciphertext for very short plaintexts?
added 90 characters in body
Jun
11
revised What algorithm would give the shortest ciphertext for very short plaintexts?
added 97 characters in body
Jun
11
answered What algorithm would give the shortest ciphertext for very short plaintexts?
Jan
11
answered DES Crack simulation
Nov
26
comment Verilog simulation of Data Encryption Standard
You might want to use an existing DES core for comparison/regression testing.
Nov
22
awarded  Enthusiast
Nov
15
answered Why is elliptic curve cryptography not widely used, compared to RSA?
Nov
12
revised What is pre-image resistance, and how can the lack thereof be exploited?
added 2 characters in body
Nov
12
comment What is pre-image resistance, and how can the lack thereof be exploited?
@PaĆ­loEbermann: Perhaps -- realistically, talking about which is more devastating is a little like arguing about whether it's worse to die by guillotine or firing squad. Either way you're dead (in a hurry). Just to be a bit more clear, I'll edit it anyway.
Nov
12
answered What is pre-image resistance, and how can the lack thereof be exploited?
Nov
1
comment Why do we need special key-wrap algorithms?
It's probably worth noting that one of the conclusions from the paper is that although they think the algorithms they analyzed are probably at least reasonably correct, they could not prove any of them, and most of them are sufficiently complex (and some contain unexplained bits and pieces) that such a proof may well be impossible.
Oct
31
comment Is Blowfish strong enough for VPN encryption?
Being fair, DES was at least as much a product of IBM as of any federal bureaucracy (if anything, much more so).
Oct
28
answered Why would you expect to find a collision in a hash function after approximately $\sqrt{n}$ hashes?