2,048 reputation
820
bio website
location
age
visits member for 3 years, 4 months
seen Dec 12 at 20:00

I am a math/computer nerd. Nothing to see here, move along.


Oct
14
reviewed Close How to use the key from a Diffie Hellman exchange?
Oct
14
comment Key management protocol for end-to-end security on Advanced Metering Infrastructure
This is a bit of a tangent, but if you're interested in learning about what some more sophisticated crypto can do in the specific context of smart meters, you might want to read up on work by George Danezis et al., e.g., www0.cs.ucl.ac.uk/staff/G.Danezis/papers/DFKZSEGS13.pdf.
Oct
12
reviewed Leave Open Block Cipher Modes
Oct
6
reviewed No Action Needed Session based AES with random key and static salt
Oct
5
reviewed Close Witness and Commitment in Commitment schemes
Oct
3
awarded  Student
Oct
3
revised Has there been any cryptanalysis of AES under a non-uniformly distributed key?
added 142 characters in body
Oct
3
comment Has there been any cryptanalysis of AES under a non-uniformly distributed key?
@owlstead This is not my area, but it seems to me that key scheduling attacks would be well in-scope here. For example, consider generating an AES-256 key by appending 178 zeros (or whatever) to a uniformly random 80-bit string. The result would (arguably) have enough entropy to be border-line secure against brute-force attacks, but it's my understanding that the key scheduler wasn't designed to handle this level of abuse.
Oct
3
comment Has there been any cryptanalysis of AES under a non-uniformly distributed key?
@TravisMayberry I was using the term "uniform distribution" in the technical sense, i.e., all keys are equally likely. The standard PRP security definition assumes this property of the blockcipher key, and I was wondering if anyone had looked at the question of what happens when this assumption is violated (aside from related key attacks).
Oct
2
reviewed Close How does Blowfish avoid successful cryptanalysis?
Oct
2
reviewed Close What is the translation for “hash” in french?
Oct
2
asked Has there been any cryptanalysis of AES under a non-uniformly distributed key?
Oct
1
reviewed No Action Needed what are DP and DQ in Encryption by RSA in c#
Oct
1
reviewed Close Is Attribute based encryption sub-class of Identity based encryption
Oct
1
reviewed Reviewed Triple DES in Firefox - in practice
Sep
30
reviewed No Action Needed CDH problem and Square-DH problem
Sep
30
comment Bridging the gap between security proofs and “real-world” security
I think that in its current form, this question might be too broad and subjective. This rabbit hole is deep. The range of possible issues includes appropriateness of the attack model (most models assume no timing side-channels exist), the interpretation of what "secure" means (when is it safe to leak plaintext length? Are even the strongest possible order-preserving encryption security definitions "secure enough"?), the assumptions (AES? Good. LWE? Hmm... ROM? Uh...). To say nothing of concrete vs. asymptotic security, a can of worms on its own! Not to mention implementation issues.
Sep
30
awarded  Explainer
Sep
30
awarded  Enlightened
Sep
30
awarded  Nice Answer