1,141 reputation
322
bio website
location
age
visits member for 1 year, 4 months
seen Aug 29 at 2:44

Semi-competent user and consciously incompetent implementer of cryptography. Math hurts my head.


Aug
28
reviewed Close How does Random Oracle and Standard Model differ?
Aug
28
reviewed Close mixing SPN and Fiestel
Aug
28
comment Choice of authenticated encryption mode for whole messages
@e-sushi "And in case of doubt, have a look at the OCB-AES128, OCB-AES192, and OCB-AES256 test vectors" - last I looked those were all 128 bit block size ;). I was referencing RFC 7253 which explicitly limits the standardised OCB to 128 bits, but I take your point that OCB in general can use different block sizes. My question about the critique of CCM stands though...
Aug
28
comment Choice of authenticated encryption mode for whole messages
"Also, GCM has a pretty good performance" - this should really be can have pretty good performance. As @SquareRootOfTwentyThree's answer notes, non hardware/SIMD-accelerated table based GCM (e.g. pure Java impls) is either memory intensive (typically 8k of key dependant tables for decent speed) or unbearably slow. On many platforms, GCM can be unusable, while CCM/EAX will still perform reasonably.
Aug
28
comment Choice of authenticated encryption mode for whole messages
"... CCM. That mode is only defined for block ciphers with a block length of 128 bits" - I don't understand this as a critique of CCM, since this statement is true of GCM and OCB as well (EAX can be used with arbitrary block sizes). The major critiques of CCM are usually speed (2-pass) and that it's packet mode.
Aug
16
reviewed Leave Open Implementation Attacks on Hashes
Aug
16
reviewed No Action Needed Using hashes as passwords
Aug
15
reviewed Close How does Diffie-Hellman key exchange work?
Aug
15
reviewed Close I am new to Cryptography and I wonder if one can Suggest me Beginner Projects
Aug
12
reviewed Leave Open Is XORing a SHA256 better than truncating it?
Aug
12
reviewed No Action Needed Are there any cryptographic flaws in my webhook signing process?
Aug
12
reviewed No Action Needed Multiparty Computation with ORAM
Aug
10
reviewed Close Help deciphering caesar cipher
Aug
10
reviewed Close RSA encoding problem help
Aug
8
reviewed Close How to decrypt 3DES in ECB mode (using a wordlist)?
Aug
8
reviewed Leave Open Algebraic Normal Form Piccolo
Aug
6
reviewed Leave Open How feasible is word-level frequency analysis over English (or any language)?
Aug
6
reviewed Leave Open Straightforward method for hampering frequency analysis on deterministic encryption
Aug
6
reviewed Close Question about AES and Cryptsetup
Aug
6
reviewed Leave Open How many degrees of freedom up my sleeve?