Paŭlo Ebermann

9,710 reputation

21743

bio	website	paul-ebermann.tumblr.com
	location	Berlin, Germany
	age
visits	member for	1 year, 10 months
	seen	41 mins ago
stats	profile views	210

Don't fear to edit my posts: even if I have more reputation than you, I do make mistakes.

I'm now also a Moderator Pro Tempore (= until the first elections) at Cryptography Stack Exchange: feel free to come around and ask some cryptography questions.

My personal name is spoken as /ˈpawlo/ (IPA), in English this would be written similar to Powlo, I think (i.e. the vowels are ow and o), with an accent on the before-last syllable (which is the first in this case). It's the Esperanto form of my given name.

The photo shows my shadow, taken at night. My camera sometimes seems to forget all the other frequencies and only stores the green ones.

My current main private programming project is the game of fencing, an online abstract turn based strategy game. Implemented as a Java applet, using git as a version control system.

Some more links:

I created an github repository where I'll add interesting code created for responses here.
I lastly created Javadoc for JSch - i.e. I read most of the code, thus I now also can answer some JSch-related questions.
I now have a blog, too. This will feature interesting questions and answers from Stackoverflow (beside other topics).
A link to my google profile for testing this "author" feature.
I got a Job with StackOverflow Careers, and my company's technology department (where I work) has now its own website/blog.

	9,710 reputation	bio	website	paul-ebermann.tumblr.com	visits	member for	1 year, 10 months
21743 badges		location	Berlin, Germany		seen	41 mins ago

summary answers questions tags badges favorites bounties reputation activity

2,283 Actions

suggestions reviews revisions comments badges posts accepts all

May 12	comment	Designing a security system from scratch with a custom protocol, suggestions needed Welcome to Cryptography Stack Exchange. That is quite a long question, and in this current form probably will get only the answers "use TLS for connection, and OpenPGP for storage instead of inventing your own protocols". You'll need to explain why the standard protocols don't fit your needs to get useful responses. Also, I think you should split off the storage part from the connection part, and outline the needs you think you have.
May 12	reviewed	Leave Open Increased CRC collision probability when adding bits to input message
May 12	reviewed	Close Can someone help with the following hashes?
May 12	comment	Can someone help with the following hashes? Welcome to Cryptography Stack exchange. Your question asking for analysis of your data is not a kind of question which really can be answered. Also, please look up on the terms "hash", "encryption", "base conversion/encoding".
May 12	reviewed	Leave Open random number generator 10-side dice alternative
May 12	comment	Crypting text cheating wife on iphone Sorry, your question has nothing to do with cryptography.
May 11	comment	Does SRP reduce to DH key echange when shared password is not secret? (Your first comment didn't have the "derived from".) Of course you can derive something from the whole transcript, but $K$ is already derived from all the relevant values in the transcript, so it seems somehow superfluous. And as long as you got the same session key, everything is fine (unless SRP, i.e. the DL problem or the hash function in question, gets really broken).
May 11	comment	Does SRP reduce to DH key echange when shared password is not secret? Hmm, I imagine that out-of-band channel as a telephone call between two humans, and they usually don't want to read long series of numbers to each other. Therefore I imagine it would be easier to derive some hash from $K$ and read/compare this instead of the whole transcript.
May 11	revised	Why is the basic (fixed-length) CBC MAC construction not a secure MAC when it is used on variable-sized messages? edited tags
May 11	comment	CBC-MAC , fixed length, all blocks returned @curious Even the best authors make typos ... and when not native in English (as me and fgrieu), we tend to overlook them sometimes. Luckily Crypto SE reputation doesn't mirror mainly English language knowledge. Thanks for your correction, and feel free to suggest edits wherever you find typos or other kind of mistakes. (When it is not totally obvious that it is a mistake, a comment might be better, though.)
May 11	revised	Does SRP reduce to DH key echange when shared password is not secret? add some more disclaimers.
May 11	revised	Does SRP reduce to DH key echange when shared password is not secret? add number
May 11	answered	Does SRP reduce to DH key echange when shared password is not secret?
May 11	reviewed	Approve suggested edit on Combining LFSRs for Stream Ciphers: Why do we need high non-linearity?
May 10	comment	Does SRP reduce to DH key echange when shared password is not secret? What does "I've already done mutual authentication" mean in your protocol? Does this protect against a man-in-the-middle?
May 10	comment	random number generator 10-side dice alternative That is a quite slow way of generating random digits/letters/signs. Its quality depends on how good you can shuffle, and if really all keys have same form, weight and so on.
May 10	answered	Finding hash almost-collisions
May 10	comment	Finding hash almost-collisions It looks like there was some cheating ... I suppose for the next such competition, one should have salted the input by the submitter's name (or institution domain name, here), so copying other people's result will not help at all :-)
May 10	comment	Finding hash almost-collisions Some background‌.
May 10	comment	Is the DES algorithm in OPENSSL random? @StephenTouset I wouldn't say "absolutely 100% broken", just "can be bruteforced in a reasonable time by attackers with some recources". And this is mainly because of the small effective key size of 56 bits. It would be broken when there were much faster attacks than that. Or did I miss some new developments in cryptanalysis of DES? (But still, don't use DES nowadays.)