Reputation
267
Top tag
Next privilege 300 Rep.
Create new tags
Badges
2 9
Impact
~9k people reached

  • 0 posts edited
  • 0 helpful flags
  • 11 votes cast
Apr
24
awarded  Notable Question
Mar
16
comment AES key reuse and guessing the key
Gotcha, just wanted to include that tidbit.
Mar
16
comment AES key reuse and guessing the key
Another thing typically required is a signed message authentication code. If you decrypt an AES-CBC blob with the wrong passphrase, there's no way to determine that you've successfully decrypted the blob without validating something else. HMACs are used for this purpose, deriving their key from the symmetric encryption key.
Jan
5
accepted What is the difference between a HMAC and a hash of data?
Nov
17
asked IV larger than block size of cipher?
Oct
20
awarded  Popular Question
Sep
8
awarded  Popular Question
Aug
31
accepted Is Curve25519 vulnerable to private key exposure in the case of a bad RNG?
Aug
28
comment Is Curve25519 vulnerable to private key exposure in the case of a bad RNG?
Yes, I was primarily concerned about private key exposure at signing time, not bad RNG at key-generation time; if you've got bad RNG at key generation time, you're screwed eternally if you keep using that key.
Aug
28
comment Is Curve25519 vulnerable to private key exposure in the case of a bad RNG?
So, having a good RNG at key generation time is the main factor, and that is acceptable and true for almost all cryptographic operations. Since ED 25519 seems to not require a RNG at signature time (right?), its implementation isn't vulnerable to what I described, right?
Aug
28
revised Is Curve25519 vulnerable to private key exposure in the case of a bad RNG?
added 288 characters in body
Aug
28
comment Is Curve25519 vulnerable to private key exposure in the case of a bad RNG?
Perhaps a better question: are any elliptic curve algorithms not vulnerable to this problem?
Aug
28
asked Is Curve25519 vulnerable to private key exposure in the case of a bad RNG?
Jun
21
awarded  Yearling
Jan
5
awarded  Popular Question
Aug
13
asked How does Diffie-Hellman key exchange work?
Jul
2
awarded  Curious
May
25
asked Why would splitting a password output be better than separate HMACs for encryption/authentication key derivation?
May
23
comment Encryption and HMAC key derivation
What advantages are gained by just splitting the output from scrypt in key derivation? Why is not using a HMAC as a PRNG a better option?
May
23
asked Encryption and HMAC key derivation