Reputation
14,919
Next tag badge:
64/100 score
18/20 answers
Badges
1 20 67
Newest
 Nice Answer
Impact
~321k people reached

May
22
answered Attacking CBC with predictable but encrypted IV
May
22
reviewed Approve blinding tag wiki excerpt
May
22
reviewed Approve logjam tag wiki excerpt
May
22
reviewed Approve shacal-2 tag wiki excerpt
May
22
reviewed Delete Is it possible to have identical public keys for different ciphers?
May
22
revised Is it possible to have identical public keys for different ciphers?
copyedit, remove the misleading word "colliding" from title
May
22
reviewed Reviewed Can a TLS client perform any DH regeneration?
May
22
answered Why is Bcrypt called a Key Derivation Function?
May
21
revised P10 to P8 in S-DES
edited tags
May
21
revised Cryptanalysis of S-DES - Equations
edited tags
May
21
wiki created s-des description
May
21
wiki created s-des excerpt
May
21
revised Ciphertext-only attack on Simplified DES
edited tags
May
21
answered one-way deterministic hash for low entropy input?
May
21
comment Elliptic Curve Cryptography Encryption and text representation implementation
This does not appear to answer the question in any meaningful sense.
May
20
awarded  Good Answer
May
19
comment Do hand-based hash functions / MACs exist?
Similar, maybe duplicate question: crypto.stackexchange.com/questions/765/… (although it doesn't mention MACs).
May
19
comment Why cant Public Key Encryption be perfectly secure?
@RickyDemer: Right, that's more or less what I had in mind. Sorry for the fuzzy language. (Also, if the message length is bounded, you can just check all possible messages. You might still want to weigh the messages by plausibility, though, if reasonable messages only make up a small fraction of the full message space.)
May
19
comment Why cant Public Key Encryption be perfectly secure?
@RickyDemer: Iterate over possible private keys, check whether the private key can correctly decrypt most messages encrypted with the known public key. (We can reasonably assume that nobody would use a private key that doesn't work most of the time, at least unless there's an additional error checking and redundancy layer involved, in which case it really should be considered part of the cryptosystem.)
May
19
awarded  Popular Question