network profile
| bio | website | |
|---|---|---|
| location | Helsinki, Finland | |
| age | 34 | |
| visits | member for | 1 year, 9 months |
| seen | Mar 19 at 18:13 | |
| stats | profile views | 15 |
|
Aug 17 |
answered | Now that quantum computers have been out for a while, has RSA been cracked? |
|
Aug 17 |
comment |
What security does Keccak offer against quantum attacks, specifically Grover's algorithm? Actually, I was mostly looking an answer that would be a generic attack against Keccak (or actually, against any sponge function built with a permutation), not for a quantum attack that would utilize the structure of the actual Keccak permutation. |
|
Aug 17 |
awarded | Scholar |
|
Aug 17 |
comment |
What security does Keccak offer against quantum attacks, specifically Grover's algorithm? That is exactly what I thought, but wanted confirmation that I'm not missing some crucial tidbit why it wouldn't be so. Thank you! |
|
Aug 17 |
accepted | What security does Keccak offer against quantum attacks, specifically Grover's algorithm? |
|
Aug 17 |
comment |
How can my application make sure the right symmetric key is used for decryption? You got that part right, but you missed one part: "Do not encrypt the key without authenticating it." The HMAC-SHA256 part will tell you if the key is correct or not with overwhelming probability. This is almost the same as encrypting a fixed string - or encrypting a crc - just that the authenticator is cryptographic and covers the key as well. |
|
Aug 16 |
answered | How can my application make sure the right symmetric key is used for decryption? |
|
Aug 16 |
answered | How can two different passphrases unlock the same content? |
|
Aug 16 |
comment |
How can SSL secure a two-way communication with only one key-pair? Not all of them rely on authentication of at least one side. There are "DH_anon" algorithms which do not authenticate either side - these are not enabled normally. These are obviously vulnerable to man-in-the-middle if there is nothing else validating the peer. |
|
Aug 16 |
comment |
How can SSL secure a two-way communication with only one key-pair? In TLS 1.2, there is a special "signature_algorithms" extension, which specifies the possible signature types. That supercedes the definition of the signature algorithm inside the key exchange name. Hence, the key exchange algorithms in TLS 1.2 could be just "DH" and "ECDH". That's why the *DH_* names are historical - the algorithms themselves are not deprecated in any way. |
|
Aug 16 |
awarded | Teacher |
|
Aug 16 |
answered | How can SSL secure a two-way communication with only one key-pair? |
|
Aug 16 |
awarded | Supporter |
|
Aug 16 |
awarded | Student |
|
Aug 16 |
asked | What security does Keccak offer against quantum attacks, specifically Grover's algorithm? |
