13,003 reputation
32764
bio website paul-ebermann.tumblr.com
location Berlin, Germany
age
visits member for 3 years
seen yesterday

Don't fear to edit my posts: even if I have more reputation than you, I do make mistakes.

I'm now also a Moderator Pro Tempore (= until the first elections) at Cryptography Stack Exchange: feel free to come around and ask some cryptography questions.


My personal name is spoken as /ˈpawlo/ (IPA), in English this would be written similar to Powlo, I think (i.e. the vowels are ow and o), with an accent on the before-last syllable (which is the first in this case). It's the Esperanto form of my given name.

The photo shows my shadow, taken at night. My camera sometimes seems to forget all the other frequencies and only stores the green ones.

My current main private programming project is the game of fencing, an online abstract turn based strategy game. Implemented as a Java applet, using git as a version control system.


Some more links:


Jul
27
comment CSPRNG that cannot be used as random extractor
I guess for a PRNG you usually have a short input and longer output, while in a randomness extractor it is the other way around. That might be the key point of difference.
Jul
27
comment True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
@xorcoder Please refrain from insulting other members of this site (or anyone at all). I don't see anything wrong with owlstead's answer. I deleted your comments.
Jul
14
comment Leak-proof protocol: is such a thing possible?
How would using scrypt in any way reduce the leakage rate? I can see it reducing the encryption rate, but this would not really help.
Jul
13
revised Effective security of block cipher – equal the key size, or half the key size?
added 1 character in body
Jul
12
revised Effective security of block cipher – equal the key size, or half the key size?
add an explicit paragraph about the strength of a cipher.
Jul
12
awarded  Yearling
Jul
12
answered Effective security of block cipher – equal the key size, or half the key size?
Jul
9
awarded  Nice Answer
Jul
8
comment What exactly does a key do?
@Wad: yes, one of the 26 keys (the "shifting by 0" one) would be a weak key, which doesn't change anything. If you are encrypting only a single letter, then this is just a valid key as all other ones.
Jul
6
revised Generate Finite Field power of g
formatting
Jul
2
awarded  Curious
Jul
1
comment Attacks on AES-128 (ECB) based on some knowledge of plaintext
What are your security goals with your protocol?
Jun
29
comment Associative standard cryptographic hash function
Are restrictions on $a$ and $b$ allowed (like a fixed size or such)?
Jun
29
awarded  Custodian
Jun
24
comment How come Shamir Secret Sharing uses Lagrange interpolation?
What does "computational complexity" mean here? These are the same polynomials, just written differently.
Jun
23
comment What algorithm would give the shortest ciphertext for very short plaintexts?
@tylo counter mode by itself doesn't provide any authentication, so an intercepting attacker who guesses the right plaintext can substitute an arbitrary different one.
Jun
23
awarded  Nice Answer
Jun
18
answered SHA1 multipart calculation
Jun
18
comment Is HMAC needed for a SHA-3 based MAC?
There are MAC schemes based on SHA-3 which don't do the nested hashing of HMAC, but please don't call them "HMAC".
Jun
18
reviewed Leave Open How to calculate inverse affine transform in AES from forward affine transform?