13,536 reputation
33272
bio website paul-ebermann.tumblr.com
location Berlin, Germany
age
visits member for 3 years, 4 months
seen 2 days ago

Don't fear to edit my posts: even if I have more reputation than you, I do make mistakes.

I'm now also a Moderator Pro Tempore (= until the first elections) at Cryptography Stack Exchange: feel free to come around and ask some cryptography questions.


My personal name is spoken as /ˈpawlo/ (IPA), in English this would be written similar to Powlo, I think (i.e. the vowels are ow and o), with an accent on the before-last syllable (which is the first in this case). It's the Esperanto form of my given name.

The photo shows my shadow, taken at night. My camera sometimes seems to forget all the other frequencies and only stores the green ones.

My current main private programming project is the game of fencing, an online abstract turn based strategy game. Implemented as a Java applet, using git as a version control system.


Some more links:


Aug
31
awarded  Enlightened
Aug
27
answered Security of very simple XOR with random?
Aug
27
answered Possible CPA or CCA attack when using AES-CBC mode under the following situation?
Aug
27
revised Possible CPA or CCA attack when using AES-CBC mode under the following situation?
edited tags
Aug
27
revised RSA was rejected by which journal?
edited tags
Aug
26
awarded  Nice Answer
Aug
25
revised encryption wiki excerpt
add decryption into the text.
Aug
25
awarded  public-key
Aug
24
revised Can all asymmetric key pairs be reversed?
thanks @Ricky Demer.
Aug
24
answered Counter Mode: how to choose the nonce part of the counter?
Aug
24
answered Can all asymmetric key pairs be reversed?
Aug
20
comment A patched SHA1 attempt for password verification
Collision resistance is not what you should worry about for password hashes, preimage resistance is the point.
Aug
7
awarded  Enlightened
Aug
7
awarded  Nice Answer
Jul
27
comment CSPRNG that cannot be used as random extractor
I guess for a PRNG you usually have a short input and longer output, while in a randomness extractor it is the other way around. That might be the key point of difference.
Jul
27
comment True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
@xorcoder Please refrain from insulting other members of this site (or anyone at all). I don't see anything wrong with owlstead's answer. I deleted your comments.
Jul
14
comment Leak-proof protocol: is such a thing possible?
How would using scrypt in any way reduce the leakage rate? I can see it reducing the encryption rate, but this would not really help.
Jul
13
revised Effective security of block cipher – equal the key size, or half the key size?
added 1 character in body
Jul
12
revised Effective security of block cipher – equal the key size, or half the key size?
add an explicit paragraph about the strength of a cipher.
Jul
12
awarded  Yearling