Reputation
2,248
Top tag
Next privilege 3,500 Rep.
Protect questions
Badges
9 24
Newest
 Custodian
Impact
~23k people reached

Nov
30
reviewed Close Encrypt algorithm
Nov
30
reviewed Leave Open Meaning of Multiplicative Group to the power n i.e. Z^n
Nov
22
reviewed Reviewed Real life systems that use concepts of crypto computing
Nov
22
reviewed Reviewed Recover a secret message in a .wav file
Nov
21
reviewed Close Is there a Javascript and Java implementation of a good CSPRNG
Nov
17
reviewed No Action Needed plaintext distribution ,perfect secrecy cryptosystem
Nov
17
reviewed Close Modern integer factorization software
Nov
9
reviewed Close Determining message given cipher-text and public key
Nov
4
reviewed No Action Needed Is $(f(X), G(X))$ pseudorandom?
Oct
26
reviewed Close Does the size of a ECDSA key determine the hash algorithm?
Oct
21
reviewed Close What does “learnable with oracle queries” mean?
Oct
14
reviewed Close How to use the key from a Diffie Hellman exchange?
Oct
14
comment Key management protocol for end-to-end security on Advanced Metering Infrastructure
This is a bit of a tangent, but if you're interested in learning about what some more sophisticated crypto can do in the specific context of smart meters, you might want to read up on work by George Danezis et al., e.g., www0.cs.ucl.ac.uk/staff/G.Danezis/papers/DFKZSEGS13.pdf.
Oct
12
reviewed Leave Open Block Cipher Modes
Oct
6
reviewed No Action Needed Session based AES with random key and static salt
Oct
5
reviewed Close Witness and Commitment in Commitment schemes
Oct
3
awarded  Student
Oct
3
revised Has there been any cryptanalysis of AES under a non-uniformly distributed key?
added 142 characters in body
Oct
3
comment Has there been any cryptanalysis of AES under a non-uniformly distributed key?
@owlstead This is not my area, but it seems to me that key scheduling attacks would be well in-scope here. For example, consider generating an AES-256 key by appending 178 zeros (or whatever) to a uniformly random 80-bit string. The result would (arguably) have enough entropy to be border-line secure against brute-force attacks, but it's my understanding that the key scheduler wasn't designed to handle this level of abuse.
Oct
3
comment Has there been any cryptanalysis of AES under a non-uniformly distributed key?
@TravisMayberry I was using the term "uniform distribution" in the technical sense, i.e., all keys are equally likely. The standard PRP security definition assumes this property of the blockcipher key, and I was wondering if anyone had looked at the question of what happens when this assumption is violated (aside from related key attacks).