Reputation
18,526
Top tag
Next privilege 20,000 Rep.
Access 'trusted user' tools
Badges
1 28 75
Impact
~445k people reached

Nov
17
comment Consequences of AES without any one of its operations
@poncho: That looks like an answer to me. Want to make it one?
Nov
16
comment CCA security of a system that splits messages and encrypts each packet
Is this homework? It appears to be phrased as such. If so, let me just give a hint: en.wikipedia.org/wiki/Malleability_%28cryptography%29
Nov
16
comment Why sorting is needed for Meet-in-the-middle attack
Small note: In practice, you probably wouldn't use a binary search, but rather you'd sort both sets and run a list merge on them. In any case, though, you still end up doing about $O(n \log n)$ comparisons; without sorting, that would be $O(n^2)$, which is no more efficient than brute force.
Nov
13
answered Perfectly secret cipher can leak about the key?
Nov
12
comment IPsec authentication and encryption lgorithms
As the Wikipedia page notes, actual IPsec implementations typically seem to be on the kernel level (for example, the Linux kernel includes one since v2.5), and so won't generally be portable per se. The underlying crypto algorithms, however, are, and can be found e.g. in the OpenSSL library, which should meet your specs (cross-platform support, written in C). Of course, OpenSSL is really a TLS/SSL library, so it contains a lot of other stuff besides the crypto primitives, too, but as long as you don't mind the extra cruft (which is all in a shared library, anyway), it might be a good choice.
Nov
11
reviewed Close what is SALSA20 Nonce and its requirements
Nov
11
reviewed Reviewed IPsec authentication and encryption lgorithms
Nov
11
answered IPsec authentication and encryption lgorithms
Nov
11
reviewed Reviewed Can hashing become encrypting?
Nov
11
reviewed Reviewed ASCII input to HMAC weaker than raw bytes?
Nov
11
reviewed Reviewed what are the security benefits of LUKS?
Nov
11
awarded  Nice Answer
Oct
31
awarded  Notable Question
Oct
10
comment Why is TLS SRP verifier based on user name?
@nefarel: Dunno. I might mutter something about Merkle-Damgård length extension attacks, or about provable reducibility to the PRF-ness of the SHA1 compression function, but honestly I have no real idea. It looks sort of like a clumsy imitation of HMAC, but since the folks who designed SRP are pretty smart cryptographers, presumably it's a clever imitation of HMAC, I just don't know exactly how or why. That might make an interesting question in itself.
Oct
4
revised How is XOR used for encryption?
added 465 characters in body
Oct
4
answered How is XOR used for encryption?
Sep
30
awarded  Explainer
Sep
26
reviewed Close Base64 for a hash algorithm
Sep
26
reviewed Leave Open Question about the security of Substitution-Permutation Network
Sep
25
reviewed Leave Open Why are we advising PKI if we know that quantum computers will break them?