43 reputation
4
bio website
location
age
visits member for 1 year, 6 months
seen May 28 '13 at 13:54

Feb
15
comment Why is OCB-AES mode not becoming a standard for authenticated encryption?
@CodesinChaos Note that AES-NI doesn't provide instructions for full AES but rather round-wise instructions. So, a dedicated construction that recycles some of the AES operations can readily make use of the new instructions. Examples of new such new AE schemes: AEGIS and ALE, both given in DIAC workshop booklet
Feb
15
awarded  Teacher
Feb
14
comment Why is OCB-AES mode not becoming a standard for authenticated encryption?
A dedicated AE construction could clearly do better performance-wise than using AES. As for 2), what do you make out of security proofs that assume behaves securely whereas it doesn't? Anyway these are some broader arguments why OCB is not so perfect as it seems.
Feb
14
answered Why is OCB-AES mode not becoming a standard for authenticated encryption?
Feb
9
comment Why is feed-forward mechanism used in hash functions?
ok, to simplify, if we look only at 1-block messages, then, with the feed-forward it is not possible to efficiently find pseudo-preimages, whereas without feed-forward this is easily done. then this extends to a regular preimage for 2-block messages as explained above
Feb
7
awarded  Scholar
Feb
7
awarded  Supporter
Feb
7
accepted Why is feed-forward mechanism used in hash functions?
Jan
31
awarded  Student
Jan
30
asked Why is feed-forward mechanism used in hash functions?