Reputation
670
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
3 8
Newest
 Yearling
Impact
~17k people reached

Feb
16
awarded  Yearling
Oct
12
answered Encoding scalar values to points on Ed25519
Sep
1
answered Why Curve25519 for encryption but Ed25519 for signatures?
May
12
answered DH with AES - is that an acceptable security scheme over UPnP?
Mar
15
comment Is using Ed25519 parameters in ECDSA safe?
The formulas found in books often don't work for rare cases of certain points.
Mar
15
answered RSA Decryption from samples
Feb
16
awarded  Yearling
Feb
16
awarded  Yearling
Nov
5
answered What is so special about elliptic curves?
Nov
2
answered Can ECB mode really leak some characters?
Oct
14
answered How does GCM (Galois/Counter Mode) work?
Oct
11
answered Is using Ed25519 parameters in ECDSA safe?
Sep
3
answered Is it possible to translate a piece of language into your own without knowing the language?
Jul
5
answered DSA, RSA, ECDSA etc - which one is cheapest for signing?
Jun
23
comment When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
csrc.nist.gov/groups/ST/toolkit/BCM/documents/comments/CWC-GCM/… Because of the nature of the polynomial authenticator, there is a security gap that increases for small authenticator sizes. $p(x)$ has $d$ roots, so the chance of picking one is $d/q$ where $q$ is the field size. Here $q=2^k$, and so for small $k$ this is a bigger gap proportionally.
Jun
23
awarded  Editor
Jun
23
revised When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
explained that not all MACs retain strength on truncation.
Jun
22
suggested approved edit on When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
Jun
16
comment Can cryptography be used to hide routing information from the router?
It's a way to implement a mixnet where users determine the mix. Just put in a Benes network as your function.
Jun
11
awarded  Commentator