20,283 reputation
12786
bio website
location Paris, France
age
visits member for 3 years, 2 months
seen 27 mins ago

I'm an engineer with experience in applied cryptography, in particular in Smart Card systems.


Sep
6
answered What are options to compute DES retail MAC (aka ISO 9797-1 mode 3) under PKCS#11?
Sep
6
comment What are options to compute DES retail MAC (aka ISO 9797-1 mode 3) under PKCS#11?
@poncho: Ah, I had misunderstood your comment. I'll fix that with an answer.
Sep
6
revised Why does FIPS 186-4 require specific sizes for keys?
Add link and tag
Sep
5
comment Base64 for a hash algorithm
It is very common to post-process a hash's result using base64, and the resulting algorithm could be considered a hash. If so, that resulting algorithm is a hash algorithm that uses Base64 in (the final phase of) the process of hashing a string. $\;$ That question has no clear-cut answer as stated.
Sep
5
revised Is it possible to generate a secure permutation F over 32-bit integers even if F(0) … F(n) is public knowledge?
Incorporate comments
Sep
5
revised Is it possible to generate a secure permutation F over 32-bit integers even if F(0) … F(n) is public knowledge?
retag
Sep
5
answered Is it possible to generate a secure permutation F over 32-bit integers even if F(0) … F(n) is public knowledge?
Sep
4
revised What are options to compute DES retail MAC (aka ISO 9797-1 mode 3) under PKCS#11?
mention the requirement of using DES in the token only
Sep
3
asked What are options to compute DES retail MAC (aka ISO 9797-1 mode 3) under PKCS#11?
Aug
29
comment Are there other digital certificate formats than X.509?
The title of that quote is not even wrong, as a type can't be meaningfully compared to a certificate. $\;$ And truth is: NOT all Digital Certificates are also a X.509 certificate.
Aug
29
comment Are there other digital certificate formats than X.509?
There are yet other Digital Certificate formats; see this answer
Aug
29
comment Are there other digital certificate formats than X.509?
An example of use of CVC is in the European Digital Tachograph Smart Card; see Council Regulation 3821/85 (ammended), Annex 1B, Appendix 11, section 3.3 (starting at CSM_016)
Aug
27
comment RSA was rejected by which journal?
For what D.W. refers to, see Ralph Merkle's own account
Aug
25
comment Why should I use an Initialization Vector (IV) when I have unique keys?
That's a VERY good point, I have altered my answer accordingly. I wish I had noticed that alternate answer long before!
Aug
25
revised Why should I use an Initialization Vector (IV) when I have unique keys?
Oups! We can (and do) live with no IV when unique keys are used, but that does make some attacks less difficult.
Aug
25
comment Attacking unuauthenticated RSA
Yes, the same holds: insuring confidentiality and insuring authenticity are distinct goals, both in symmetric and asymmetric cryptography. $\;$ Is there anything in the question beyond that ?
Aug
22
comment Why does DES use exactly 16 rounds?
@Henrick Hellström: I question your statement that that there is no successful (better-than-brute-force, of course) attack against 8 round DES $\;$ This is a claimed better-than brute-force attack on DES reduced to 13 rounds, with a relatively practical variant for 10 rounds. I tend to agree with this answer.
Aug
19
awarded  Popular Question
Aug
17
awarded  Yearling
Aug
15
awarded  Nice Answer