| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 3 months |
| seen | Mar 4 at 1:38 | |
| stats | profile views | 1 |
|
Feb 15 |
comment |
Why is OCB-AES mode not becoming a standard for authenticated encryption? @CodesinChaos Note that AES-NI doesn't provide instructions for full AES but rather round-wise instructions. So, a dedicated construction that recycles some of the AES operations can readily make use of the new instructions. Examples of new such new AE schemes: AEGIS and ALE, both given in DIAC workshop booklet |
|
Feb 15 |
awarded | Teacher |
|
Feb 14 |
comment |
Why is OCB-AES mode not becoming a standard for authenticated encryption? A dedicated AE construction could clearly do better performance-wise than using AES. As for 2), what do you make out of security proofs that assume behaves securely whereas it doesn't? Anyway these are some broader arguments why OCB is not so perfect as it seems. |
|
Feb 14 |
answered | Why is OCB-AES mode not becoming a standard for authenticated encryption? |
|
Feb 9 |
comment |
Why is feed-forward mechanism used in hash functions? ok, to simplify, if we look only at 1-block messages, then, with the feed-forward it is not possible to efficiently find pseudo-preimages, whereas without feed-forward this is easily done. then this extends to a regular preimage for 2-block messages as explained above |
|
Feb 7 |
awarded | Scholar |
|
Feb 7 |
awarded | Supporter |
|
Feb 7 |
accepted | Why is feed-forward mechanism used in hash functions? |
|
Jan 31 |
awarded | Student |
|
Jan 30 |
asked | Why is feed-forward mechanism used in hash functions? |