13,051 reputation
11455
bio website vyznev.net
location Helsinki, Finland
age
visits member for 3 years, 5 months
seen Jan 21 at 12:14

I'm a PhD student in biomathematics, working on stochastic individual-based models of evolution in spatially structured populations. My other interests include cryptography, programming games and puzzles, photography and graphic design.


I'm the main author and maintainer of the Stack Overflow Unofficial Patch (SOUP), a user script for browsers with GreaseMonkey-compatible user script support (Firefox, Chrome, Opera, possibly Safari) that fixes or works around a number of outstanding issues with the Stack Exchange user interface.

I tend to answer a lot more questions than I ask. Some answers I'm rather proud of:

CC-Zero Please consider any (original) code I post to Stack Overflow and other Stack Exchange sites to be released under CC-Zero unless stated otherwise. You may do whatever you want with it and don't have to credit me in any way, although of course that would be nice.


Dec
28
reviewed Leave Open Why would an Initialization Vector be supplied externally?
Dec
28
revised Why would an Initialization Vector be supplied externally?
copyedit, should -> would in title
Dec
28
comment Why shouldn't I use ECB encryption?
@giorgim: Even if you don't have any MAC or AE mode available, using CBC is still strictly better than ECB. If you do have a MAC function, CBC-then-MAC is a perfectly good AE mode.
Dec
28
comment Why shouldn't I use ECB encryption?
@giorgim: There's really no good reason to use ECB (except as a building block for other modes). Pretty much any crypto library provides at least CBC or CTR mode, and if not, they're trivial to implement yourself. Slap an HMAC (or CMAC) on top of that, and you're good to go.
Dec
28
revised Can I simulate iterated AES-ECB with other block cipher modes?
added 1 character in body; edited title
Dec
28
answered Can I simulate iterated AES-ECB with other block cipher modes?
Dec
28
comment What are the security implications of multiple hashing?
Ps. See also this related answer of mine. (I tried to look for it earlier, but couldn't find it here, because it turns out I actually posted it on SO.)
Dec
28
answered What are the security implications of multiple hashing?
Dec
28
comment What are the security implications of multiple hashing?
@BobBrown: Right. Multiple hashing isn't (necessarily) bad. There are plenty of good and standard algorithms, like PBKDF2, that basically work by hashing the password multiple times. What's generally a bad idea is designing your own non-standard password hashing scheme, without any idea of what makes such as scheme secure.
Dec
23
reviewed Leave Open Why shouldn't I use ECB encryption?
Dec
23
reviewed Approve homomorphic-encryption tag wiki excerpt
Dec
23
reviewed Edit Using modulus in one time pad?
Dec
23
revised Using modulus in one time pad?
Better latex formatting.
Dec
23
reviewed Approve homomorphic-encryption tag wiki
Dec
23
reviewed Reviewed Encrypting decryption key
Dec
23
answered PBKDF vs HKDF for pretty long key
Dec
23
comment Why shouldn't I use ECB encryption?
@D.W.: I think this is an excellent question for this site, because it asks a simple, common question in a way that invites good answers, makes a great resource to reference later, and is likely to show up well in searches. We've already got several questions that kind of skirt this topic, but this is the first one that just comes straight out and asks the literal question in the title. Not every question here has to be hard in order to be good.
Dec
22
awarded  Nice Answer
Dec
22
revised Why shouldn't I use ECB encryption?
+note on disk encryption
Dec
22
comment Why shouldn't I use ECB encryption?
@supercat: That's basically disk encryption, so you could use modes designed for that. I believe XTS is considered a good choice, although, like all disk encryption modes, it has its limitations (which you should understand before using it). If possible, it should be combined with a MAC of some sort to defend against active attacks.