Reputation
14,581
Next tag badge:
62/100 score
18/20 answers
Badges
1 17 64
Newest
 Necromancer
Impact
~305k people reached

1h
awarded  Necromancer
14h
reviewed Reviewed Public-key cryptosystems without poly-time quantum attacks
14h
comment Public-key cryptosystems without poly-time quantum attacks
Hi, James, and welcome to Crypto Stack Exchange. Please note that we would generally prefer good answers here to consist of more than just a link. If you've read the book, perhaps you could summarize the relevant aspects of it (like, say, which ciphers it describes, and what their major advantages and drawbacks are)? Also, instead of linking to a Google Books result, perhaps a link to, say, the publisher's official page -- and/or to pqcrypto.org -- might be better?
1d
comment HKDF entropy extraction
@StephenTouset: I don't agree. System RNGs have been known to suffer from serious implementation errors (like the Android RNG bug) in the past, not to mention being potentially tempting targets for subversion attacks, and their correct operation is difficult if not impossible for a caller to verify. The safe approach, where possible, is to maintain your own entropy pool, and to treat the system RNG as just another potentially unreliable entropy source for it.
1d
comment Attacking CBC with predictable but encrypted IV
Based on the known plaintext/ciphertext pair they have, the attacker already knows that $E_K(C_{i-1} \oplus P_i) = C_i$. Thus, they can choose the IV (as long as it's one of the ciphertext blocks they know the plaintext for) by choosing the appropriate nonce.
1d
answered Attacking CBC with predictable but encrypted IV
1d
reviewed Approve blinding tag wiki excerpt
1d
reviewed Approve logjam tag wiki excerpt
1d
reviewed Approve shacal-2 tag wiki excerpt
1d
reviewed Delete Is it possible to have identical public keys for different ciphers?
1d
revised Is it possible to have identical public keys for different ciphers?
copyedit, remove the misleading word "colliding" from title
1d
reviewed Reviewed Can a TLS client perform any DH regeneration?
1d
answered Why is Bcrypt called a Key Derivation Function?
2d
revised P10 to P8 in S-DES
edited tags
2d
revised Cryptanalysis of S-DES - Equations
edited tags
2d
wiki created s-des description
2d
wiki created s-des excerpt
2d
revised Ciphertext-only attack on Simplified DES
edited tags
2d
answered one-way deterministic hash for low entropy input?
2d
comment Elliptic Curve Cryptography Encrytion and text representation implementation
This does not appear to answer the question in any meaningful sense.