meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 3 months |
| seen | 8 hours ago | |
| stats | profile views | 5 |
|
May 17 |
comment |
When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible? You were doing so well until the last sentence. Poly1305 and AES-GCM cannot be truncated, due to algebraic properties they have despite being information theoretically secure. |
|
May 4 |
awarded | Citizen Patrol |
|
May 2 |
comment |
Have I understood pedersen commitment correctly? Large prime order is to ensure discrete log is sufficiently hard. |
|
May 1 |
answered | Have I understood pedersen commitment correctly? |
|
Apr 27 |
comment |
Tamper-proofing log files They actually do sell WORM drives which are the more practical equivalent. |
|
Apr 27 |
answered | Tamper-proofing log files |
|
Apr 26 |
comment |
Using the output of a stream cipher, how to guarantee the integrity of 4 bytes of data? Take a value from the stream and use it to key SipHash. |
|
Apr 24 |
answered | Using the output of a stream cipher, how to guarantee the integrity of 4 bytes of data? |
|
Apr 21 |
answered | What is the best way to store sensitive information on the client? |
|
Mar 19 |
comment |
Google is using RC4, but isn't RC4 considered unsafe? This answer is completely and utterly wrong. At FSE '13 Bernstein presented a passive attack that requires intercepting 2^32 sessions where the same secrets are encrypted. That sounds like a lot, but if an application automatically restarts a connection it is very possible. |
|
Mar 8 |
awarded | Supporter |
|
Mar 8 |
answered | Zero-knowledge proof that a group element is a quadratic residue? |
|
Mar 8 |
awarded | Scholar |
|
Mar 8 |
accepted | Equivalents to a physical hat+shaking? |
|
Mar 7 |
awarded | Student |
|
Mar 7 |
comment |
Timing attack on modular exponentiation Of course! But there are plenty of faster constant time methods. You need to hide what you are doing. |
|
Mar 7 |
asked | Equivalents to a physical hat+shaking? |
|
Mar 6 |
answered | Timing attack on modular exponentiation |
|
Mar 5 |
answered | Security relevance of random factor in Paillier |
|
Mar 3 |
answered | While generating a random Elliptic curve what are the conditions i have to considerd? |
