Reputation
14,601
Next tag badge:
62/100 score
18/20 answers
Badges
1 17 64
Newest
 Necromancer
Impact
~306k people reached

May
21
wiki created s-des description
May
21
wiki created s-des excerpt
May
21
revised Ciphertext-only attack on Simplified DES
edited tags
May
21
answered one-way deterministic hash for low entropy input?
May
21
comment Elliptic Curve Cryptography Encryption and text representation implementation
This does not appear to answer the question in any meaningful sense.
May
21
comment How to find the encryption method and password?
Ps. Do you find the answers to either of these two questions helpful?
May
21
revised How to find the encryption method and password?
deleted 2 characters in body; edited tags; edited title
May
21
comment How to find the encryption method and password?
Just to clarify, you're talking about a classical pen-and-paper substitution cipher (like Vigenère, for example), right? (For a secure modern cipher, the answer is basically "you can't".)
May
20
comment Cannot verify rsa signature on Android
I suspect this question would be better suited for Stack Overflow. Also, it might help if you could turn your code into a self-contained example demonstrating the issue.
May
20
awarded  Good Answer
May
19
comment Do hand-based hash functions / MACs exist?
Similar, maybe duplicate question: crypto.stackexchange.com/questions/765/… (although it doesn't mention MACs).
May
19
comment Why cant Public Key Encryption be perfectly secure?
@RickyDemer: Right, that's more or less what I had in mind. Sorry for the fuzzy language. (Also, if the message length is bounded, you can just check all possible messages. You might still want to weigh the messages by plausibility, though, if reasonable messages only make up a small fraction of the full message space.)
May
19
comment Why cant Public Key Encryption be perfectly secure?
@RickyDemer: Iterate over possible private keys, check whether the private key can correctly decrypt most messages encrypted with the known public key. (We can reasonably assume that nobody would use a private key that doesn't work most of the time, at least unless there's an additional error checking and redundancy layer involved, in which case it really should be considered part of the cryptosystem.)
May
19
awarded  Popular Question
May
19
reviewed Reviewed application for cryptography algorithms
May
19
comment application for cryptography algorithms
When I Googled for c# crypto library, the first three results I got were the official .NET crypto API, Bouncy Castle for C# and this closed SO question that links to both of them. Are these anything like what you're looking for?
May
19
comment Is One Time Pad considered Chosen-Plaintext Attack Secure?
... We should be able fix the first issue by making the keyspace $\{0,1\}^*$ and restricting the total length of messages that can be encrypted with each key to a polynomial function of $n$. This seems reasonable enough, since the adversary can only make a polynomial number of queries anyway. But the statefulness issue remains, although I guess we could just make the keys long enough compared to the maximum total message length to make the probability of overlap negligible. Lots of handwaving here, I admit, but it seems like it should work.
May
19
comment Is One Time Pad considered Chosen-Plaintext Attack Secure?
I guess we could define the "keyspace" for a one-time pad as $\{0,1\}^{\Bbb N}$, regardless of the security parameter $n$, and prefix each ciphertext with a starting offset in the key sequence that is guaranteed not to overlap any previously used key segment. That should be enough to (almost) make the one-time pad an IND-CPA secure encryption system, if I'm not mistaken. The only problems being that 1) $\rm Gen$ will not actually be an algorithm in the strict sense, and will surely not be polynomial-time, and 2) $\rm Enc$ would have to be stateful to guarantee the non-overlap property.
May
19
revised Can you make a hash out of a stream cipher?
add provable-security tag; remove the footnote about Carter-Wegman MACs, since none of the answers really address it (and it probably should be a separate question anyway)
May
19
comment Can you make a hash out of a stream cipher?
I don't really see how this adds anything to B-Con's second answer. In particular, as noted in the comments to that answer, it's not quite obvious how to obtain a block cipher that actually satisfies the (rather strict) security properties needed to prove the security of the resulting hash function.