1,463 reputation
412
bio website
location
age
visits member for 2 years, 8 months
seen 9 mins ago

I am a math/computer nerd. Nothing to see here, move along.


Feb
11
comment Should tweak be unique per message?
It depends on the algorithm. For encryption algorithms, such as OCB, tweak values are usually derived from the IV.
Feb
11
revised Should tweak be unique per message?
added 353 characters in body
Feb
11
answered Should tweak be unique per message?
Jan
27
awarded  Custodian
Jan
27
reviewed Approve suggested edit on How long will my encryption remain private?
Jan
6
awarded  Custodian
Jan
5
revised Deterministically combine more than one source of entropy
added 120 characters in body
Jan
5
answered Deterministically combine more than one source of entropy
Dec
22
awarded  Enlightened
Dec
22
awarded  Nice Answer
Dec
21
reviewed Excellent Why don't we use MACs to store passwords?
Dec
21
reviewed Excellent Are there any differences in operation between existing Diffie-Hellman specifications?
Dec
21
reviewed Excellent Why is sharing the seed and using SecureRandom “deterministically” so bad?
Dec
21
reviewed Satisfactory Why send a challenge with CHAP?
Dec
21
awarded  Custodian
Dec
21
reviewed Satisfactory Serpent cipher : Osvik S-Boxes confusion and test vectors
Dec
15
comment Game traffic encryption AES CTR + HMAC
Regarding GCM-AES tag length, 8 bytes may be enough here. See eprint.iacr.org/2012/438.pdf, theorem 2. Assuming the 70-byte upper limit to plaintext length mentioned by the OP can be assured even against adversarial players, then $\ell_A = 5$. So the probability of a successful forgery after q forgery attempts would be at most ~ 6q/2^{64}. Which is, I think, perfectly reasonable for a game.
Dec
15
answered Game traffic encryption AES CTR + HMAC
Nov
25
comment Ciphers in CBC mode reveal place of change in plaintext
CBC-ESSIV does not solve the problem of IV-reuse leaking information about where a plaintext has changed; it's simply a fix on the even worse problem of IVs changing in predictable ways from sector to sector that affected earlier versions of dm-crypt (and still affects CBC-plain). While you're probably aware of this, I worry that your answer does not make it clear.
Nov
24
awarded  Enlightened