21,885 reputation
12991
bio website
location Paris, France
age
visits member for 3 years, 4 months
seen 40 mins ago

I'm an engineer with experience in applied cryptography, in particular in Smart Card systems.


Dec
5
answered SHA1 Collisions - what about practical attacks?
Dec
5
revised Will X9.31 remain a secure & acceptable deterministic random generator beyond 2015?
Remove duplicate text. State what I think of ANSI931_TDES3 for new developments.
Dec
5
answered Will X9.31 remain a secure & acceptable deterministic random generator beyond 2015?
Dec
4
revised Using machine-learning techniques for data-dependent operations in ciphers
Fix title
Dec
3
comment practical use of homomorphic encryption
Mental poker (in the setup where $n$ is composite) arguably uses the homomorphic properties of RSA.
Dec
3
revised Existential Forgery on textbook RSA signatures
TeXify
Dec
3
comment Existential Forgery on textbook RSA signatures
You can be made right, if you properly define $m' = m_1/m_2$ and $σ' = σ_1/σ_2$, and handle the possible case of these quantities being undefined; by showing that it is extremely unlikely; or/and showing that should it occur nevertheless, the adversary can trivially forge any signature. $\;$ Hint: you need to amend $σ' = σ_1\cdot σ_2$ in a similar way, if you use (as you seem to do) that the definition of a valid signature $σ$ of message $m$ is that $σ=m^d\bmod N$, or the more usual and equivalent definition that $0\le σ<N$ and $σ^e\equiv m\pmod N$.
Dec
2
comment Find generator for irreducible polynomial over binary field
The lazy man's way to pick up a small polynomial with this or that characteristic is to lookup the appropriate list in Joerg Arndt's useful and ugly page of mathematical data. For example, your irreducible polynomial $x^4+x+1$ is the line reading 4,1,0 in the Complete list of binary irreducible polynomials up to degree 11.
Dec
2
comment Reversing a Psuedo Crytographic Hash
I added this in hope that it could help simplify the answer. In particular, msg[i+1] is (digest[i+1] XOR msg[i])*19 MOD 256 or something on that tune. I do realize that it makes use of an SMT solver less useful.
Dec
2
comment Reversing a Psuedo Crytographic Hash
It helps to notice that when working on bytes, multiplication by 129 is always exactly undone by a further multiplication by 19, because $19\cdot129\equiv1\pmod{256}$
Dec
1
reviewed Approve RSA Cryptosytsem, choosing $e$
Dec
1
comment Implementing a pseudo random function in practice
@sashank: AES-128 with a fixed key is a PRP over $\{0,1\}^{128}$; as such, we can expect to distinguish it from a PRF with about $2^{64}$ encryptions, and that's not a "good PRF".
Nov
30
comment Generation of strong primes
FIPS 186-4, appendix B.3 contains one of several possible definitions of strong prime, and methods to generate these.
Nov
30
comment RSA Cryptosytsem, choosing $e$
That's covered here.
Nov
30
comment transforming RC2 keys to have effective minimum length in implementations with fixed effective lengths
Have you determined the values of T and T1 (in the sense of rfc2268 section 2) used in the implementation that you want, and in the OpenSSL implementation that you start from? My reading is that the "effective key length" T1 in rfc2268 can be any multiple of 8 from 128 to 1024 for an implementation accepting both T=5 and T=16 bytes of key.
Nov
30
comment Factoring a number who has factors with same number of digits
Here is a fine description of MPQS. GMP-ECM is one of your best bet for a ready-made tool.
Nov
30
comment Factoring a number who has factors with same number of digits
Being the product of two primes with the same number of digits is NOT by itself a good indication of being factorisable by Fermat's factoring. Rather, try QS and friends, or ECM.
Nov
30
comment Cracking RSA with Small exponent 5
I guess that what the TA means is to include the final quote in the unknown. So the plaintext is $m=2^{8k}a+b$ where $b$ is the unknown password (including quotes, at least final, if any), $k\approx9$ is the number of bytes in $b$, and $a$ is the known prefix (I'd say, with the final quote, but we can remove it and increase $k$ by 1). $\;$ Again, read section 4 in Dan Boneh's Twenty Years of Attacks on the RSA Cryptosystem or some other source on Coppersmith's method; then tell us what you are stuck with.
Nov
29
revised Does SHA-1 hash have quasi commutative property?
polish
Nov
29
revised Does SHA-1 hash have quasi commutative property?
added 110 characters in body