Ilmari Karonen
Reputation
18,546
Top tag
Next privilege 20,000 Rep.
Access 'trusted user' tools
 8h comment Steganographic embedding of an RSA-encrypted message into an image This question has nothing to do with RSA specifically. Your real problem seems to be that you haven't understood how LSB steganography works. 2d awarded Notable Question 2d answered Is there a null HMAC? 2d comment Common Modulus Attack not reproducible Um, no you can't. By definition, if $\gcd(m,n) = k$, then any multiple of $m$ modulo $n$ is also a multiple of $k$. The closest you can get is finding a pseudoinverse $m^*$ such that $m \times m^* = k \pmod n$ (and you can do that with the same extended Euclidean algorithm used to find normal modular inverses). Feb 5 revised How to generate a random number so server cannot cheat? added 329 characters in body; added 102 characters in body; added 5 characters in body Feb 5 answered How to generate a random number so server cannot cheat? Feb 4 revised Find the minimum Adversary's Advantage typo Feb 4 comment Find the minimum Adversary's Advantage @stathisb: Are you missing the definition of advantage for MAC schemes, or the way to obtain a non-negligible advantage for this particular question (or something else)? If the former, your textbook (or lecture notes) should have it, assuming that it's using the term "advantage" for MACs in the first place; if the latter, see my answer below. Feb 4 answered Find the minimum Adversary's Advantage Feb 4 comment Find the minimum Adversary's Advantage @stathisb: ...where you've now introduced three new undefined symbols ($K$, $M$ and $T$). I can guess what those mean (I bet they're the keyspace, message space and tag space respectively), but such notation isn't really unambiguous or universal enough that you could just assume that everybody will understand it (they way in math you can usually assume e.g. that $\pi \approx 3.14159265$), especially if they learned crypto from a different textbook than yours. But anyway, more important than all this notation is really that you still haven't told us what you've tried and where you're stuck. Feb 4 comment Find the minimum Adversary's Advantage @RickyDemer: I suspect it just means that they're representing their MAC scheme as a pair of functions $S$ and $V$, which probably stand for "signer" and "verifier". Wikipedia uses a similar notation. But yeah, the question should really mention that, or at least link to a definition. Feb 4 comment Security of a parallelizable block cipher mode Also, this construction looks vaguely similar to OCB mode. Are you familiar with that? Feb 4 comment Security of a parallelizable block cipher mode Maybe a silly question, but what's $\boxplus$? I assume $\oplus$ means bitwise XOR, but I don't really know a standard meaning for $\boxplus$. Feb 1 comment SHA1 collisions and the impact for ECDSA signatures If the attacker only has control over $m'$, then they need a (second) preimage attack to forge a signature. But there are practical scenarios where both $m$ and $m'$ may be controlled by the attacker, in which case a collision attack suffices. For example, the MD5 collision attack was used to forge SSL certificates by getting an established CA to sign an innocent-looking certificate, and then replacing it with another certificate with the same MD5 hash, but far higher privileges. Feb 1 reviewed Close Compression in Symmetric-Encryption? Feb 1 reviewed Close Is there any code implementation of the HMAC-DRBG PRNG? Feb 1 comment Is there any code implementation of the HMAC-DRBG PRNG? If user1193112's advice doesn't solve your problem, you might want to ask this on Stack Overflow instead. Note that requests for existing implementations are considered off-topic there too, but if you rephrased your question as "How can I implement HMAC_DRBG from NIST SP 800-90A in C#?" (or C++; please pick one), and provided some indication of what you've tried and where you're stuck, it should be on-topic there. Feb 1 comment Can an AES-256 key be generated for a large number of cribs? We seem to be getting questions like this one with some regularity. Alas, the answer is always the same: if the virus writer didn't screw up somehow (and didn't get arrested and forced to surrender their private keys), you can't break the encryption. Jan 28 revised How can a message encrypted with the public key be decrypted with the private key? clarify title; misc. copyedits; remove "thanks" per SE style guide Jan 27 revised How can a message encrypted with the public key be decrypted with the private key? added 2 characters in body; added 1 character in body