13,536 reputation
33272
bio website paul-ebermann.tumblr.com
location Berlin, Germany
age
visits member for 3 years, 4 months
seen 8 hours ago

Don't fear to edit my posts: even if I have more reputation than you, I do make mistakes.

I'm now also a Moderator Pro Tempore (= until the first elections) at Cryptography Stack Exchange: feel free to come around and ask some cryptography questions.


My personal name is spoken as /ˈpawlo/ (IPA), in English this would be written similar to Powlo, I think (i.e. the vowels are ow and o), with an accent on the before-last syllable (which is the first in this case). It's the Esperanto form of my given name.

The photo shows my shadow, taken at night. My camera sometimes seems to forget all the other frequencies and only stores the green ones.

My current main private programming project is the game of fencing, an online abstract turn based strategy game. Implemented as a Java applet, using git as a version control system.


Some more links:


Sep
28
comment What is wrong with using SHA1 in digital signatures? Why is a robust hash function needed?
Welcome to Cryptography Stack Exchange. Your question was migrated here because of being not directly related to software development (the topic of Stack Overflow), and being fully on-topic here. Please register your account here, too, to be able to comment and accept an answer.
Sep
28
revised What is wrong with using SHA1 in digital signatures? Why is a robust hash function needed?
typo, formatting
Sep
28
revised What is wrong with using SHA1 in digital signatures? Why is a robust hash function needed?
edited tags
Sep
28
comment Is there a secure cryptosystem that can be performed mentally?
I suppose "Pen & Paper" is much more easily done than "mentally". Would such answers be welcome, too?
Sep
28
revised How does HOTP keep in sync?
Really have the wikipedia link, hotp tag
Sep
28
comment What is wrong with using SHA1 in digital signatures? Why is a robust hash function needed?
Nah, there are infinitely many possible meaningful documents, but only 2^160 different possible SHA-1 hashes. By only varying some short sections of a document (in total a bit over 80 bits long, for example some numbers in non-important cells of the spreadsheet), you are bound to get collisions with sensible documents. Of course, this (with a secure hash function) still takes too much time to be done in the attacker's lifetime.
Sep
28
revised Why can't Diffie-Hellman be used for signing?
edited tags
Sep
28
comment What is wrong with using SHA1 in digital signatures? Why is a robust hash function needed?
Actually, the "should be wildly different" is more like "it is hard to find two such documents at all" (but then you could quite likely have lots of spreadsheets differing only in some of the numbers in the cells).
Sep
28
revised For Diffie-Hellman, must g be a generator?
formatting the quote as such
Sep
28
reviewed Approve suggested edit on Is CBC really dead?
Sep
28
revised Is CBC really dead?
adding link titles instead of raw URLs, some punctuation
Sep
28
comment Is it possible to spoof an identity cert modulus?
What would "spoof the browser cert" mean? Create a new private key matching an existing public one?
Sep
27
revised Can an Enigma-style cipher of sufficient complexity be considered secure in today's world?
add link
Sep
27
reviewed Approve suggested edit on How can a random salt for a hash function work in practice?
Sep
27
reviewed Approve suggested edit on What are the benefits of the two permutation tables in DES?
Sep
27
reviewed Approve suggested edit on Would the ability to efficiently find Discrete Logs have any impact on the security of RSA?
Sep
27
revised Why isn't the IND-CCA property inherited when sending redundant ciphertext?
secret instead of private
Sep
27
comment Why isn't the IND-CCA property inherited when sending redundant ciphertext?
Are you actually using a public-key scheme (e.g. using a key-pair), or are you using a secret key scheme (where both parties have the same shared key)? "private key" is normally used to refer to the former, but sometimes also the latter, this is why "public key scheme" is preferred.
Sep
27
revised Why isn't the IND-CCA property inherited when sending redundant ciphertext?
better title, some formatting, rewording, link
Sep
27
asked What is the difference between a stream cipher and a one-time-pad?