Reputation
14,601
Next tag badge:
62/100 score
18/20 answers
Badges
1 17 64
Newest
 Necromancer
Impact
~306k people reached

2d
reviewed Reviewed Compacting a substitution cipher key
2d
comment Product of Sophie Germain Primes and safe primes
Re: your edit, this would most definitely not be safe. In fact, if you know that $n=pq$, with $q=2p+1$, then it's trivial to solve the quadratic equation $n=2p^2+p$ using the quadratic formula, which you might have learned in high school. (The solution, FWIW, is $p=(\sqrt{8n+1}-1)/4$.)
2d
revised In RSA, why is it important choosing e so that it is coprime to φ(n)?
correct Fermat -> Euler, prettify math notation, misc. copyedits
2d
reviewed Close Product of Sophie Germain Primes and safe primes
2d
reviewed Approve libsodium tag wiki excerpt
2d
reviewed Approve truecrypt tag wiki excerpt
2d
reviewed Approve arx tag wiki excerpt
May
24
awarded  Necromancer
May
22
comment HKDF entropy extraction
@StephenTouset: I don't agree. System RNGs have been known to suffer from serious implementation errors (like the Android RNG bug) in the past, not to mention being potentially tempting targets for subversion attacks, and their correct operation is difficult if not impossible for a caller to verify. The safe approach, where possible, is to maintain your own entropy pool, and to treat the system RNG as just another potentially unreliable entropy source for it.
May
22
comment Attacking CBC with predictable but encrypted IV
Based on the known plaintext/ciphertext pair they have, the attacker already knows that $E_K(C_{i-1} \oplus P_i) = C_i$. Thus, they can choose the IV (as long as it's one of the ciphertext blocks they know the plaintext for) by choosing the appropriate nonce.
May
22
answered Attacking CBC with predictable but encrypted IV
May
22
reviewed Approve blinding tag wiki excerpt
May
22
reviewed Approve logjam tag wiki excerpt
May
22
reviewed Approve shacal-2 tag wiki excerpt
May
22
reviewed Delete Is it possible to have identical public keys for different ciphers?
May
22
revised Is it possible to have identical public keys for different ciphers?
copyedit, remove the misleading word "colliding" from title
May
22
reviewed Reviewed Can a TLS client perform any DH regeneration?
May
22
answered Why is Bcrypt called a Key Derivation Function?
May
21
revised P10 to P8 in S-DES
edited tags
May
21
revised Cryptanalysis of S-DES - Equations
edited tags