Reputation
2,005
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
5 10
Newest
 Necromancer
Impact
~41k people reached

Feb
9
comment Need CryptDeriveKey AES implementation in C#
Microsoft does document their "CryptDeriveKey" function. Check msdn. It's their own invention, not standard based.
Feb
9
comment Please help me decrypt this Classical Cipher
Looks like a transposition to me
Feb
9
comment Linear cryptanalysis complete key guessing
You guess the other bits as well, after determining the subkeys.
Feb
6
comment How to break Universal Re-Encryption algorithm?
Possibly relevant crypto.stackexchange.com/a/18954/553
Dec
23
comment SHA256 message bytes
Indeed. It's a key expansion in a way: the message is the key for the cipher (at the core of SHA26) and is expanded from 16 32-bit words to 64 32-bit words. The state is then handled as the message (with a xor feed forward for non-reversibility)
Dec
17
comment Factorizing N to derive D
long is also not big enough. Use gmp or some other bignum library, if you want C. Of course Python will do this OK, as it has bignums built in.
Dec
12
comment Message exchange with textbook RSA
I agree, but it's just a conceptual exercise, I suppose. It might be part of some algebra course without crypto focus, e.g., so padding, replay attacks etc. are not relevant, but just the application of some algebra theory that was just treated, e.g. I didn;t want to get things in that the OP wouldn't know about.
Dec
11
comment Why does GPG ciphertext length differ with fixed plaintext length?
The base64 difference is expected. If we input $n$ bytes, we have $4(n/3 + 1)$ output bytes if $n$ is not evenly divided by 3, and $4(n/3)$ otherwise. So a difference of 4 between 389 (remainder 2) and 387 (no remainder) is clear, and cannot be helped. That is how base64 encoding works.
Dec
11
comment Why does GPG ciphertext length differ with fixed plaintext length?
Can you give the complete gpg command ? Giving the string on the command line interprets it as a filename, so you must do something else. All details can matter.
Dec
11
comment Why does GPG ciphertext length differ with fixed plaintext length?
Just a remark: base64 is not encryption, just a standard way to transfer/display binary data as text data.
Dec
8
comment Different tools return different ciphertext value for equal input
Let us continue this discussion in chat.
Dec
8
comment Different tools return different ciphertext value for equal input
Can you load your own key into the HSM? Then it would be testable
Dec
8
comment Different tools return different ciphertext value for equal input
The online tool seems to use ASCII values as the key (so it's crap, basically), if the test vectors below on the page are to be believed. So your hex input is interpreted as ASCII, not as bytes encoded as hex-ASCII.
Dec
8
comment Different tools return different ciphertext value for equal input
You cannot without the actual key bytes that are used, essentially.
Dec
8
comment Different tools return different ciphertext value for equal input
It seems strange that an HSM could leak its key, which is unusual. Moreover, your keyvalue is, after the first two bytes 86 01 the ASCII "nerated DES3 Key", followed by null bytes. So I don't think it's the actual key, but something else. The first two bytes "ought' to be 47 65 for "Ge", to make even more sense
Dec
4
comment How to verify CA certificate from Yubico with openssl?
Glad to be able to help!
Dec
2
comment How to verify CA certificate from Yubico with openssl?
It says it's been signed with pgp so maybe use that?
Dec
2
comment Implementing AES-CBC (Matasano Crypto Challenge 10)
Could you post your first block (in hex)? Also, you give argument "null" to IV. That should be a vector with 16 0's, so byte iv = new byte[16]; Arrays.fill(iv,(byte) 0) before you call the CBC mode with that iv as argument, not null!
Dec
2
comment Implementing AES-CBC (Matasano Crypto Challenge 10)
I say, post it.
Dec
1
comment Implementing AES-CBC (Matasano Crypto Challenge 10)
@Joba Posting of code has been known to happen here...