Reputation
36,285
Next tag badge:
99/100 score
20/20 answers
Badges
2 56 151
Newest
 Good Answer
Impact
~630k people reached

Mar
29
comment Why is padded RSA not CCA-secure?
One obvious additional issue is that with $l(n)=2n-2$ (where $n$ is the number of bits in each of the prime factors of $N$), there remains almost no room for randomness in $r$.
Mar
27
awarded  Nice Answer
Mar
25
comment ChaCha20 core vs ideal unkeyed PRP
@CodesInChaos: perhaps the OP considers ChaCha without the final $\boxplus$; but unambiguously, the Salsa20 core includes $\boxplus$, and I see that a lot for the term Chacha core; e.g. here; here; and even arguably by the author here.
Mar
25
revised ChaCha20 core vs ideal unkeyed PRP
Expand
Mar
25
revised ChaCha20 core vs ideal unkeyed PRP
Polish
Mar
25
revised ChaCha20 core vs ideal unkeyed PRP
Polish
Mar
25
revised ChaCha20 core vs ideal unkeyed PRP
Polish
Mar
25
revised ChaCha20 core vs ideal unkeyed PRP
Give another externally visible property.
Mar
25
answered ChaCha20 core vs ideal unkeyed PRP
Mar
24
revised Role of Fermat's little theorem in the proof of correctness of ElGamal signature
typo
Mar
24
answered Role of Fermat's little theorem in the proof of correctness of ElGamal signature
Mar
24
revised Exposed raw RSA private key operation
Pass at the pactical side of things
Mar
24
answered Exposed raw RSA private key operation
Mar
23
revised Is RSA encryption without padding secure with NIST Key Establishment schemes?
Polish
Mar
23
comment Can the SHA256 hashes of consecutive integers be attacked?
Perhaps it should be noted more strongly that what's stated in the question is not enough to insure that the range of possible values of $n/k$ is sufficiently large. For example, we could have $n=2^{88}$ [so that we do not expect anyone but a massively funded adversary to be able to brute force $n$ just by SHA256(n) ], and $m=2^{32}$ [making the attack outlined in the answer feasible with an expected $2^{55}$ hashes and as many memory fetches and like 25 GB memory, which is clearly feasible].
Mar
23
reviewed Approve Can two files/strings have the same SHA-256 value?
Mar
23
revised Is RSA encryption without padding secure with NIST Key Establishment schemes?
Fix formula in the trick for 2
Mar
23
revised Is RSA encryption without padding secure with NIST Key Establishment schemes?
Quantify requirement 1
Mar
23
revised Is RSA encryption without padding secure with NIST Key Establishment schemes?
Mention standard trick in second use case
Mar
23
revised Is RSA encryption without padding secure with NIST Key Establishment schemes?
Expand second use case.