12,123 reputation
11251
bio website vyznev.net
location Helsinki, Finland
age
visits member for 3 years, 2 months
seen yesterday

I'm a PhD student in biomathematics, working on stochastic individual-based models of evolution in spatially structured populations. My other interests include cryptography, programming games and puzzles, photography and graphic design.

I started programming (in AmigaBASIC) when I was 10 years old. Nowadays, I'm most comfortable using Perl, C and JavaScript. I know Java and PHP too, but I can't really say I like them. I also know some Python, but not as much as I'd like.


CC-Zero Please consider any (original) code I post to Stack Overflow and other Stack Exchange sites to be released under CC-Zero unless stated otherwise. You may do whatever you want with it and don't have to credit me in any way, although of course that would be nice.


I'm the main author and maintainer of the Stack Overflow Unofficial Patch (SOUP), a user script for browsers with GreaseMonkey-compatible user script support (Firefox, Chrome, Opera, possibly Safari) that fixes or works around a number of outstanding issues with the Stack Exchange user interface.

I tend to answer a lot more questions than I ask. Some answers I'm rather proud of:


Aug
4
wiki created siv excerpt
Aug
4
wiki created hash-tree description
Aug
4
wiki created hash-tree excerpt
Aug
2
reviewed Edit suggested edit on Why does OAEP have 2 rounds with 2 random oracles?
Aug
2
revised Why does OAEP have 2 rounds with 2 random oracles?
English; added link to paper
Aug
2
reviewed Approve suggested edit on Zero-knowledge proof using quadratic residue: why two options?
Jul
28
awarded  Nice Question
Jul
26
revised Why is TLS SRP verifier based on user name?
added 27 characters in body
Jul
25
answered Why is TLS SRP verifier based on user name?
Jul
25
comment Clipper chip (SKIPJACK) key exchange protocol
FWIW, the Wikipedia page no longer includes that remark. It was apparently added in this edit back in 2007, and removed in this recent edit, which also added a citation to the NIST publication you link to.
Jul
25
revised What changed in PKCS#1 v2.2, and why?
edited tags
Jul
25
answered How random is the shared secret in the Diffie Hellman key agreement
Jul
25
answered Sending TLS messages with out encryption using openssl code
Jul
24
revised Ed25519 choice of private key implementation
added 349 characters in body; edited tags
Jul
24
answered Ed25519 choice of private key implementation
Jul
20
answered Is HMAC-MD5 considered secure?
Jul
18
reviewed Approve suggested edit on Send a message to an entire group of recipients
Jul
18
comment using random encrypted RSA challenge as key material
The output of HKDF-Expand is uniquely determined by its parameters (PRK, info, length). Thus, if you want to derive multiple independent keys from the same PRK using HKDF, you need to either 1) use a different info parameter for each, or 2) generate them all with one call to HKDF-Expand and split the output. Generally, just appending a counter to the info string will work fine. (Ps. See also my edit to the answer.)
Jul
18
revised using random encrypted RSA challenge as key material
added 645 characters in body
Jul
18
answered using random encrypted RSA challenge as key material