23,688 reputation
23198
bio website
location Paris, France
age
visits member for 3 years, 7 months
seen 13 mins ago

I'm an engineer with experience in applied cryptography, in particular in Smart Card systems.


Mar
15
revised RSA key pair generation and FIPS 140-2, 186-4
polish
Mar
15
revised RSA key pair generation and FIPS 140-2, 186-4
Add critical negation
Mar
15
comment RSA key pair generation and FIPS 140-2, 186-4
@user1563721: sorry, I pass at interpreting FIPS 140-2 rules applied to PKCS#11 certified tokens to guess what form of private key export remains possible.
Mar
15
revised RSA key pair generation and FIPS 140-2, 186-4
detail what's excluded from the security policy
Mar
14
revised RSA key pair generation and FIPS 140-2, 186-4
Expand
Mar
14
answered RSA key pair generation and FIPS 140-2, 186-4
Mar
13
comment Key exchange using hash function
In (b), Alice generates a public/private key pair and sends the public key to Bob by email; Bob chooses a symmetric key k; Bob encrypts k using Alice's public key and sends the cryptogram to Alice by email; Alice deciphers that using her private key and thus gets k. That's how Alice and Bob share the symmetric key k, in the absence of attack. $\;$ In (d), Bob additionally reads H'(k) to Alice over the phone.
Mar
13
revised Key exchange using hash function
cleanup
Mar
13
comment Of what use is my code for finding prime numbers of a certain size?
In Mathematica, RandomPrime[{$i_\text{min}$,$i_\text{max}$}] gives a pseudorandom prime number in the range {$i_\text{min}$,$i_\text{max}$}.
Mar
13
revised Can CKM_RSA_PKCS signature be made secure by lowering its maximum input size?
Polish security definition, and verification procedure
Mar
13
revised Can CKM_RSA_PKCS signature be made secure by lowering its maximum input size?
Fix verification procedure
Mar
12
revised RSA padding confusion attacks
polish
Mar
12
answered RSA padding confusion attacks
Mar
12
asked Can CKM_RSA_PKCS signature be made secure by lowering its maximum input size?
Mar
10
comment Encryption scheme that allows compare ciphertexts based on the clear text
I re-tagged that question as about order-preserving encryption. This answer might help.
Mar
10
revised Encryption scheme that allows compare ciphertexts based on the clear text
add relevant tag
Mar
10
comment Fault encryption attack on RSA
Do we have any information about what bit is changed, in particular if it lies in the public exponent, or the public modulus?
Mar
10
comment what is the current actual budget - as of 2015 - needed to build a DES breaker machine?
+1 for RIVYERA, which previously had not blipped on my radar.
Mar
10
revised How do SignRecover and VerifyRecover work?
Fix a link
Mar
9
comment How do SignRecover and VerifyRecover work?
@sfallahdoost: I added my references; I admit they are not crystal clear, and some of implementing PKCS#11 requires experience in the field.