Reputation
14,328
Next tag badge:
102/100 score
19/20 answers
Badges
3 38 77
Newest
 Enlightened
Impact
~366k people reached

Mar
8
comment Can IGE mode be parallelized?
Hi, welcome to cryptography Stack Exchange. Your message was migrated here from Security Stack Exchange, because it is about a mode of operation, and better answered here. Please create an account here using the same Mail address as you used as Security SE, to be able to claim your question, possibly edit it, and accept an answer.
Mar
8
revised Can IGE mode be parallelized?
make decryption a bit more clear.
Mar
8
revised Can IGE mode be parallelized?
rewording to spell the mode name out
Mar
8
comment If a cipher has key length shorter than plaintext, then it is not perfectly secure
Perfect secrecy is not about any time bound attacker. The point is not that brute force takes some smaller number of steps, but that trying all keys gives you less than all messages with a smaller key size.
Mar
8
comment how to integrate 2-3 algorithms to encrypt large data fastly and securely insted using AES?
What is your actual question here?
Feb
25
revised How to communicate by email with forward secrecy and deniability?
deleted 1 character in body
Feb
23
comment Why is AES resistant to known-plaintext attacks?
Also, if you want to discuss more of this, maybe do this in Chat and not as comments to my answer.
Feb
23
comment Why is AES resistant to known-plaintext attacks?
@Pacerier Ricky likes to add spaces into his comments to "improve" their visual appearance, and does this with TeX (MathJax) formatting. In your inbox, this doesn't work, so the $ and \; (a kind of space) show up. (I think this is not worth the hassle, and doesn't even work with every browser/screen-size/font size combination.)
Feb
12
comment Is the complexity of Caesar (shift) ciphers “n * n!”?
Please note that "decryption" usually means an algorithm which knows the key. And knowing the key, you should be able to decrypt a text in O(length of text).
Feb
8
comment Is $f(x)\oplus x$ a one-way function?
Of course, this is only a counter-example if one-way functions exist at all.
Feb
6
awarded  Notable Question
Jan
13
revised How to find the factors of the modulus?
edited tags
Jan
9
revised Are there any known inverse hash lookups for the zero string?
null → zero
Jan
9
revised Which block cipher mode does the experts use?
you also need the key to encrypt ;-)
Jan
7
comment Loss of data due to encryption
@yyyyyyy While we are not sure that block ciphers are actually pseudorandom, the "permutation" part is usually uncontested. And this is what matters in the context of this question.
Jan
7
awarded  Notable Question
Dec
27
revised Why shouldn't I use ECB encryption?
edited tags
Dec
27
comment Can I simulate iterated AES-ECB with other block cipher modes?
And maybe also how to decrypt?
Dec
27
comment What is Initialization vector (IV)
Hi Haochen, welcome to Cryptography Stack Exchange. We (at Stack Exchange in general) prefer answers with a bit more explanation in the answer itself, instead of mainly a link to somewhere else on the Internet. If you could add some sentences about the function of the IV, this would improve your answer.
Dec
27
comment Why would an Initialization Vector be supplied externally?
I think if the caller of that library has to know the details of CBC to use it with larger plaintext, it is not abstracted enough. It should provide a stream-like API, where the caller can pass chunks of data in several steps, and the stream takes care of the details.