Reputation
19,485
Top tag
Next privilege 20,000 Rep.
Access 'trusted user' tools
Badges
1 30 79
Newest
 encryption
Impact
~500k people reached

Dec
29
answered secure embedded/microcontroller crypto using AES-ctr with hmac-sha2
Dec
28
comment How are random numbers for RSA generated?
Related: crypto.stackexchange.com/questions/71/…, crypto.stackexchange.com/questions/1970/…, crypto.stackexchange.com/questions/690/…, crypto.stackexchange.com/questions/2532/…. In fact, I'd say the first two are essentially dupes.
Dec
28
comment How are random numbers for RSA generated?
Ensuring that the number is odd will not save much time testing it, but it will save you some RNG calls. It's not a huge optimization, but it's trivial to make and does provide some benefit.
Dec
28
revised Prime Numbers in Discrete Log
edited tags
Dec
28
comment Power analysis and exponentiation by squaring
Thank you for contributing this answer! I do think your answer would be much improved if you could briefly summarize the key points from the references you cite in it. As it stands, your answer does not really provide a stand-alone answer to the question asked. You should also edit the additional information you've posted in the comments directly into your answer, if you think it's potentially worth retaining.
Dec
28
reviewed Leave Open Why shouldn't I use ECB encryption?
Dec
28
comment Why shouldn't I use ECB encryption?
@FedericoPoloni: Generally, because direct low-level access to the block cipher is sometimes useful for building higher-level constructions, such as new cipher modes. See this recent question for one example.
Dec
28
reviewed Leave Open Why would an Initialization Vector be supplied externally?
Dec
28
revised Why would an Initialization Vector be supplied externally?
copyedit, should -> would in title
Dec
28
comment Why shouldn't I use ECB encryption?
@giorgim: Even if you don't have any MAC or AE mode available, using CBC is still strictly better than ECB. If you do have a MAC function, CBC-then-MAC is a perfectly good AE mode.
Dec
28
comment Why shouldn't I use ECB encryption?
@giorgim: There's really no good reason to use ECB (except as a building block for other modes). Pretty much any crypto library provides at least CBC or CTR mode, and if not, they're trivial to implement yourself. Slap an HMAC (or CMAC) on top of that, and you're good to go.
Dec
28
revised Can I simulate iterated AES-ECB with other block cipher modes?
added 1 character in body; edited title
Dec
28
answered Can I simulate iterated AES-ECB with other block cipher modes?
Dec
28
comment What are the security implications of multiple hashing?
Ps. See also this related answer of mine. (I tried to look for it earlier, but couldn't find it here, because it turns out I actually posted it on SO.)
Dec
28
answered What are the security implications of multiple hashing?
Dec
28
comment What are the security implications of multiple hashing?
@BobBrown: Right. Multiple hashing isn't (necessarily) bad. There are plenty of good and standard algorithms, like PBKDF2, that basically work by hashing the password multiple times. What's generally a bad idea is designing your own non-standard password hashing scheme, without any idea of what makes such as scheme secure.
Dec
23
reviewed Leave Open Why shouldn't I use ECB encryption?
Dec
23
reviewed Approve homomorphic-encryption tag wiki excerpt
Dec
23
reviewed Edit Using modulus in one time pad?
Dec
23
revised Using modulus in one time pad?
Better latex formatting.