12,958 reputation
32764
bio website paul-ebermann.tumblr.com
location Berlin, Germany
age
visits member for 3 years
seen yesterday

Don't fear to edit my posts: even if I have more reputation than you, I do make mistakes.

I'm now also a Moderator Pro Tempore (= until the first elections) at Cryptography Stack Exchange: feel free to come around and ask some cryptography questions.


My personal name is spoken as /ˈpawlo/ (IPA), in English this would be written similar to Powlo, I think (i.e. the vowels are ow and o), with an accent on the before-last syllable (which is the first in this case). It's the Esperanto form of my given name.

The photo shows my shadow, taken at night. My camera sometimes seems to forget all the other frequencies and only stores the green ones.

My current main private programming project is the game of fencing, an online abstract turn based strategy game. Implemented as a Java applet, using git as a version control system.


Some more links:


Nov
15
awarded  Good Answer
Nov
15
comment Random Coin Flip using ElGamal and a Trusted Party
Have a look on which values $g^b$ can have, and how B can from these derive A's bit.
Nov
15
revised Random Coin Flip using ElGamal and a Trusted Party
formatting
Nov
15
revised What makes a hash function good for password hashing?
add some information on "Bcrypt and friends"
Nov
15
revised What makes a hash function good for password hashing?
change the question to make it more on-topic (and less "best of"), by recommendation from Aaronut
Nov
14
comment Are there practical upper limits of RSA key lengths?
@jug: But do we need to run the full Miller-Rabin on each candidate, or can we in most cases stop earlier?
Nov
14
revised Are there practical upper limits of RSA key lengths?
fix the calculation
Nov
14
comment Are there practical upper limits of RSA key lengths?
@Thomas: Seems like I wrongly counted the $\log_2 n$ factors in my paragraph to come to this exponent of 4. Correcting now.
Nov
14
answered Are there practical upper limits of RSA key lengths?
Nov
14
revised Are there practical upper limits of RSA key lengths?
formatting, better title, tags
Nov
14
comment Cipher for Product Registration?
Preferably use MAC(secret, username) instead of a simple hash (use HMAC, for example).
Nov
14
revised Why isn't the IND-CCA property inherited when sending redundant ciphertext?
edited tags
Nov
14
revised Measuring entropy for a ciphertext only attack
add tag, slight wording
Nov
13
revised Are these emerging threats against AES affecting your designs?
add paragraph about WPA2-PSK, now removing the comments
Nov
13
revised Are these emerging threats against AES affecting your designs?
formatting
Nov
13
revised Are these emerging threats against AES affecting your designs?
inline the link, identify "We".
Nov
13
revised Getting the encryption method and key from the encrypted data and the raw data
formatting, tag
Nov
13
revised Are these emerging threats against AES affecting your designs?
formatting, spelling
Nov
13
revised For public-key encryption, why does COA resistance imply CPA resistance?
tags + shorter title, see Chat (http://chat.stackexchange.com/transcript/message/2421197#2421197 and following) for discussion
Nov
13
comment For public-key encryption, why does COA resistance imply CPA resistance?
Does "ciphertext-only attack" mean that the attacker doesn't know the public key?