Reputation
277
Top tag
Next privilege 300 Rep.
Create new tags
Badges
1 9
Impact
~8k people reached

  • 0 posts edited
  • 0 helpful flags
  • 8 votes cast
Jan
5
accepted What is the difference between a HMAC and a hash of data?
Nov
17
asked IV larger than block size of cipher?
Oct
20
awarded  Popular Question
Sep
8
awarded  Popular Question
Aug
31
accepted Is Curve25519 vulnerable to private key exposure in the case of a bad RNG?
Aug
28
comment Is Curve25519 vulnerable to private key exposure in the case of a bad RNG?
Yes, I was primarily concerned about private key exposure at signing time, not bad RNG at key-generation time; if you've got bad RNG at key generation time, you're screwed eternally if you keep using that key.
Aug
28
comment Is Curve25519 vulnerable to private key exposure in the case of a bad RNG?
So, having a good RNG at key generation time is the main factor, and that is acceptable and true for almost all cryptographic operations. Since ED 25519 seems to not require a RNG at signature time (right?), its implementation isn't vulnerable to what I described, right?
Aug
28
revised Is Curve25519 vulnerable to private key exposure in the case of a bad RNG?
added 288 characters in body
Aug
28
comment Is Curve25519 vulnerable to private key exposure in the case of a bad RNG?
Perhaps a better question: are any elliptic curve algorithms not vulnerable to this problem?
Aug
28
asked Is Curve25519 vulnerable to private key exposure in the case of a bad RNG?
Jun
21
awarded  Yearling
Jan
5
awarded  Popular Question
Aug
13
asked How does Diffie-Hellman key exchange work?
Jul
2
awarded  Curious
May
25
asked Why would splitting a password output be better than separate HMACs for encryption/authentication key derivation?
May
23
comment Encryption and HMAC key derivation
What advantages are gained by just splitting the output from scrypt in key derivation? Why is not using a HMAC as a PRNG a better option?
May
23
asked Encryption and HMAC key derivation
May
20
asked Common password derivation function for different encryption methods
Jun
23
accepted Implementing PKCS#7 Padding on a Stream of Unknown Length?
May
9
awarded  Scholar