12,252 reputation
32559
bio website paul-ebermann.tumblr.com
location Berlin, Germany
age
visits member for 2 years, 9 months
seen yesterday

Don't fear to edit my posts: even if I have more reputation than you, I do make mistakes.

I'm now also a Moderator Pro Tempore (= until the first elections) at Cryptography Stack Exchange: feel free to come around and ask some cryptography questions.


My personal name is spoken as /ˈpawlo/ (IPA), in English this would be written similar to Powlo, I think (i.e. the vowels are ow and o), with an accent on the before-last syllable (which is the first in this case). It's the Esperanto form of my given name.

The photo shows my shadow, taken at night. My camera sometimes seems to forget all the other frequencies and only stores the green ones.

My current main private programming project is the game of fencing, an online abstract turn based strategy game. Implemented as a Java applet, using git as a version control system.


Some more links:


Mar
30
revised Is it possible to weaken a bitcoin private key by “using” it elsewhere?
deleted 373 characters in body
Mar
16
revised distribution for a subset of md5
edited tags
Mar
15
revised Trying to calculate the strength of a Bitcoin brain wallet created with a custom diceware password
formatting
Mar
4
revised Is it possible to calculate the 'skeleton key' for DUAL_EC_DRBG? What would it take?
edited tags
Mar
4
revised Why is H(k||x) not a secure MAC construction?
added 985 characters in body
Feb
21
revised How secure is AES-256?
some grammar fixes
Feb
17
revised Why hash or salt when signing?
added 1 characters in body
Feb
12
revised Is Diffie-Hellman mathematically the same as RSA?
added 8 characters in body
Jan
8
revised Why hash or salt when signing?
typo, formatting
Jan
7
revised Are there other digital certificate formats than X.509?
formatting, full text in title
Jan
4
revised Webcam random number generator
grammar/spelling
Oct
21
revised What's wrong with MARS?
edited tags
Oct
7
revised Is prime regeneration necessary for every new session using a Diffie-Hellman key exchange?
make clear that this is about usage of IVs instead of stream vs. block cipher.
Oct
7
revised How do multiple parties agree on a target block to hash for?
reorder sentences to make the "attack" clearer.
Oct
7
revised How do we prove that AES, DES etc. are secure?
formatting (introduce paragraph breaks).
Oct
7
revised Question about modifying the MD5 plain text to cause a collision
added 4 characters in body
Sep
16
revised Using SHA3 as an entropy pool
edited tags
Sep
14
revised What is wrong with using SHA1 in digital signatures? Why is a robust hash function needed?
mention SHA-3, preimage → collision
Sep
13
revised What is wrong with using SHA1 in digital signatures? Why is a robust hash function needed?
added 2 characters in body
Sep
13
revised How can someone predict the bits of a not-so-PRNG like Dual_EC_DRGB?
tag, title