346 reputation
110
bio website
location
age
visits member for 1 year, 5 months
seen May 12 at 1:10

May
30
comment What are the requirements of a nonce?
Is there a real source for that? Our professor has given it as a random number on his lection.
May
30
comment What are the requirements of a nonce?
So defining it as a random number is wrong? Wikipedia is not a source.
May
24
comment Why is SRP not widely used?
@PaĆ­loEbermann The difference between SRP and SSL is not that much if you have a centralised organisation and can get SSL certificates or a CA for your servers. You'll surely have a centralised directory which you have to authenticate regardless of the resource you are accessing. If you don't want web resources to steal your password you can use OAuth or something so you have to input your password on only one secure site. The advantage of SRP - you don't have to trust the server you authenticate on - doesn't have to much value in good built centralised environment. IMHO.
May
24
comment Can I use a key-derivation-function as the hash function H in SRP?
Wikipedia is not a source.
May
24
comment Why is SRP not widely used?
@PaĆ­loEbermann I think your post doesn't belong here :)
May
22
comment Is a second preimage attack on MD5 feasible?
AFAIR there are even no practical attacks for MD4.
May
22
comment Implementation of Tao Xie and Denguo Feng's MD5 attack
MD5 is only broken for collisions, it's still first and second preimage safe.
May
22
comment Why is SRP not widely used?
Well, if you ask about auth databases, then you are probably inside and organisation and could probably acquire one or many ssl certificates or even a CA. SRP would be useful for a lonely server for that it would be expensive or complicated to get a signed SSL certificate.
May
21
comment Why is SRP not widely used?
What patents do you mean? TLS-SRP in OpenSSL doesn't work for me (see link in the question) and I can't get help nowhere.<br> Don't even mention windows NT auth, it sucked 15 years ago and now it sucks multiplied growed computing power.
May
18
comment How to calculate cycles per byte
@Thomas captain to the resque!
May
13
comment Is there any strong enough pen-and-paper or mind cipher?
It can be generated with a computer, but it will be hard to remember it.
May
8
comment What's the difference between AES and earlier block ciphers?
@RolandSmith en.wikipedia.org/wiki/Block_cipher#Definition
May
7
comment What's the difference between AES and earlier block ciphers?
1. Is only CBC vulnerable? Is there a way to get rid of this limitation?
May
7
comment What's the difference between AES and earlier block ciphers?
Modes of operation are the same for all block ciphers, so I don't count them. Actually, I meant in my question "Do AES of other symmetric block ciphers offer anything more or less than ideal block cipher?"
May
5
comment Why is SRP not widely used?
Tom Wu, the author of SRP, was here once. Curious what would he say.
May
5
comment Why is SRP not widely used?
TLS-SRP became a RFC standard long ago. There is lack of implementations. Reference from 2002 is probably a little too old.
May
5
comment What's the difference between AES and earlier block ciphers?
Actually, i meant raw cipher, without modes of operations. Read "user" as "non-cryptographer".
May
5
comment Why is elliptic curve cryptography not widely used, compared to RSA?
Is it possible that better algorithms for integer factorisation were found first after RSA become widely used?
May
5
comment What's the difference between AES and earlier block ciphers?
RC4 isn't a good comparison since it's a stream cipher.
May
5
comment Why is elliptic curve cryptography not widely used, compared to RSA?
@VineetMenon crypto.stackexchange.com/questions/1190/… RSA can use very short public key. This wouldn't word with DH-based ciphers, used with ECC.