1,926 reputation
515
bio website
location
age
visits member for 3 years
seen Sep 13 at 1:35

Jan
13
comment Convert old and busted password encryption to something sensible
related: Increase the security of an already stored password hash
Jan
12
comment Is there a simple hash function that one can compute without a computer?
related: crypto.stackexchange.com/questions/11691/…
Jan
7
awarded  Nice Answer
Jan
2
comment How does the secret key in an HMAC prevent modification of the HMAC?
@StephenTouset, by "appending data to the end", I think George is referring to a length extension attack, which is not trivial.
Dec
29
comment Salts, how does the script know what the salt is?
Yes, and often the name of the hash algorithm is also concatenated to the salt and the hash, in Modular Crypt Format or LDAP / RFC2307 format.
Dec
9
revised Alphabetic Substitution with Symbols
linkfix
Dec
3
awarded  Notable Question
Nov
25
revised Is the following symmetric design secure?
fix oops -- need a random permutation here, not a random function.
Nov
23
revised Is the following symmetric design secure?
rough draft of a proof
Nov
23
answered Is the following symmetric design secure?
Nov
19
awarded  Nice Question
Nov
13
awarded  Excavator
Nov
13
revised Attack XOR encryption of binary data compressed by zlib with known key length (very short key)
Is this what you really meant?
Nov
13
revised Determine the Key given ciphertexts and plaintexts?
forgot to update B0 and B1
Nov
13
answered Determine the Key given ciphertexts and plaintexts?
Nov
13
comment How can we get CA's public key?
@CodesInChaos: make that an answer.
Nov
12
asked Is there a cryptographic hash function that can be performed with pencil and paper?
Nov
12
comment How would I make a secret notation alphabet more secure?
You might enjoy looking at shorthand systems such as Gregg shorthand -- they were never intended to be difficult to decode, but some stenographers use so many of their own custom abbreviations that even other stenographers using the same system have difficulty reading it.
Nov
12
comment Is this hand cipher any more secure than the Vigenère cipher?
You could get a lot better diffusion if, rather than handle each letter independently with "mod 26", you allow a carry over -- i.e., when adding 5 to X and obtaining C, you get a "carry over" that changes the next column from E+3=H to E+3+1=I.
Oct
23
comment What is the most secure hand cipher?
@makerofthings7: if it is used properly, as Smit Johnth pointed out, then OTP is completely immune to statistical analysis and every other kind of ciphertext-only analysis, no matter how the letters are encoded into numbers -- ASCII, Baudot code, Morse code, etc. See Wikibooks: one time pads for more details.