network profile
| bio | website | |
|---|---|---|
| location | Helsinki, Finland | |
| age | 34 | |
| visits | member for | 1 year, 9 months |
| seen | Mar 19 at 18:13 | |
| stats | profile views | 15 |
|
Sep 5 |
comment |
Does NTRU decrypt correctly now? I really don't know the specifics, but if I remember right the problem was that a "random" parameter selected by the encrypter may make the decryption process fail - and it is impossible for the encrypter to verify if this is the case without the private key. Maybe! Please confirm my understanding. |
|
Sep 5 |
answered | SHA1 usage for passwords, alternatives and advantages? |
|
Sep 1 |
comment |
What is the post-quantum cryptography alternative to Diffie-Hellman? I accepted this answer because it contained more information that I didn't already know. |
|
Sep 1 |
accepted | What is the post-quantum cryptography alternative to Diffie-Hellman? |
|
Aug 31 |
comment |
What is the signature scheme with the fastest batch verification protocol for multiple signers? On eBASH, ronald3072 is RSA at 3072 bits (roughly the same security level). It seems to be verifying signatures at 178592 cycles per verification (non-batched), which is faster than ed25519 without batching, but not with. I am not debating that Rabin-Williams can be made to provide faster verification than ed25519, I just am not aware of any concrete implementations that do. Also, if the security level can be less than exactly 2<sup>128</sup>, RSA will get significantly faster compared to the alternatives. |
|
Aug 30 |
revised |
What is the signature scheme with the fastest batch verification protocol for multiple signers? fix typo |
|
Aug 30 |
answered | What is the signature scheme with the fastest batch verification protocol for multiple signers? |
|
Aug 28 |
revised |
Looking for cryptographic secure hash algorithm(s) that produces identical root hash for differently sliced hash list added 155 characters in body; added 22 characters in body |
|
Aug 28 |
answered | Looking for cryptographic secure hash algorithm(s) that produces identical root hash for differently sliced hash list |
|
Aug 25 |
revised |
What is the post-quantum cryptography alternative to Diffie-Hellman? Clarified the public key encryption key agreement part to help getting relevant answers. |
|
Aug 25 |
awarded | Commentator |
|
Aug 25 |
comment |
What is the post-quantum cryptography alternative to Diffie-Hellman? The RFC draft was very interesting, thank you for the link! |
|
Aug 25 |
comment |
What is the post-quantum cryptography alternative to Diffie-Hellman? Like said in the message, I know that asymmetric encryption can be used for key agreement. But "just" encrypting a random key is far from a proper cryptographic protocol enforcing PFS etc. and evaluating protocol security is not trivial either. |
|
Aug 23 |
asked | What is the post-quantum cryptography alternative to Diffie-Hellman? |
|
Aug 20 |
comment |
Any good file format alternative to PGP for encrypting data at rest? If you have manual key entry, then you have to be prepared for typing errors. This means that typing errors should usually be caught before going through the entire file. This means that there should be some pre-verifier for the key only. This, combined with the need for some key derivation, complicates the protocol enough that I would definitely recommend sticking with a "standard" file format, even though they are complex. |
|
Aug 19 |
answered | Any good file format alternative to PGP for encrypting data at rest? |
|
Aug 19 |
comment |
Any good file format alternative to PGP for encrypting data at rest? Your file format does not need an IV if the same key is only used to encrypt a single file. If the key is shared, you need to make sure the IV isn't repeated. Also, if you have a separate MAC for authentication, it needs a separate key - or you have to specify a key derivation function as well. You could get away with sharing the key, but you probably shouldn't do it. For passphrase to key bytes function, you need to decide how long it can take. 5 seconds of PBKDF2 is probably good, but there's probably no command-line utility for it... |
|
Aug 19 |
comment |
Any good file format alternative to PGP for encrypting data at rest? Do you want symmetric encryption only? Is the thing you are encrypting with going to be a password/passphrase or an actual key? |
|
Aug 17 |
awarded | Editor |
|
Aug 17 |
revised |
Now that quantum computers have been out for a while, has RSA been cracked? cast some more doubt as to what D-wave computers can do |
