Reputation
15,349
Next tag badge:
67/100 score
19/20 answers
Badges
1 23 67
Newest
 Yearling
Impact
~343k people reached

Jun
22
revised Implementing AES MixColumns with fewest XOR gates
edited tags; fix broken link, misc. copyedits
Jun
22
wiki
Jun
22
reviewed Leave Open What is more efficient, pairing based cryptography or non pairing based cryptography?
Jun
22
reviewed Leave Open Is it possible to break enigma code with a todays laptop
Jun
22
awarded  Caucus
Jun
11
awarded  Enlightened
Jun
11
awarded  Nice Answer
May
31
awarded  Pundit
May
24
reviewed Reviewed Compacting a substitution cipher key
May
24
revised In RSA, why is it important choosing e so that it is coprime to φ(n)?
correct Fermat -> Euler, prettify math notation, misc. copyedits
May
24
reviewed Approve libsodium tag wiki excerpt
May
24
reviewed Approve truecrypt tag wiki excerpt
May
24
reviewed Approve arx tag wiki excerpt
May
24
awarded  Necromancer
May
22
comment HKDF entropy extraction
@StephenTouset: I don't agree. System RNGs have been known to suffer from serious implementation errors (like the Android RNG bug) in the past, not to mention being potentially tempting targets for subversion attacks, and their correct operation is difficult if not impossible for a caller to verify. The safe approach, where possible, is to maintain your own entropy pool, and to treat the system RNG as just another potentially unreliable entropy source for it.
May
22
comment Attacking CBC with predictable but encrypted IV
Based on the known plaintext/ciphertext pair they have, the attacker already knows that $E_K(C_{i-1} \oplus P_i) = C_i$. Thus, they can choose the IV (as long as it's one of the ciphertext blocks they know the plaintext for) by choosing the appropriate nonce.
May
22
answered Attacking CBC with predictable but encrypted IV
May
22
reviewed Approve blinding tag wiki excerpt
May
22
reviewed Approve logjam tag wiki excerpt
May
22
reviewed Approve shacal-2 tag wiki excerpt