Reputation
263
Next privilege 350 Rep.
Access review queues
Badges
1 9
Impact
~2k people reached

1d
comment Proving set membership in less than log(N) bandwidth
@RickyDemer I don't follow. Wouldn't that not be probabilistic?
1d
comment Proving set membership in less than log(N) bandwidth
@RickyDemer Well, then the client will know that the server is lying, and that it can't draw any conclusion about whether item X is really in the set.
1d
revised Proving set membership in less than log(N) bandwidth
deleted 1 character in body
2d
comment Proving set membership in less than log(N) bandwidth
@YehudaLindell It can be larger, but not significantly. Giving the client the the hashes of all of the items in the init phase is right out. (see edit.) Also, are you willing to have some non negligible error probability or not? No, it needs to operate deterministically - one client testing whether an item is a member must come to the same conclusion as another client.
2d
revised Proving set membership in less than log(N) bandwidth
added 85 characters in body
2d
comment Proving set membership in less than log(N) bandwidth
@RickyDemer Oh, I misunderstood what you meant by security parameter.
2d
comment Proving set membership in less than log(N) bandwidth
@RickyDemer I was eliding constant factors. But it would be $k*log(2,N)$, no?
Aug
25
asked Proving set membership in less than log(N) bandwidth
Apr
26
accepted Adding two public keys
Apr
26
asked Adding two public keys
Sep
24
awarded  Autobiographer
Aug
26
awarded  Excavator
Aug
26
revised Google is using RC4, but isn't RC4 considered unsafe?
found link and quoted it
Aug
26
suggested approved edit on Google is using RC4, but isn't RC4 considered unsafe?
Apr
22
awarded  Yearling
Oct
12
revised How many messages needs to be send to server to get AES key in Cache-timing Attack
added links to referenced papers
Oct
12
suggested approved edit on How many messages needs to be send to server to get AES key in Cache-timing Attack
Oct
11
comment 2 comparable hashes generated from one string
@user4982 There's an opportunity cost involved in setting up scrypt. It takes up development time that could be used to lock down unneeded services, to set up AppArmor, to look for SQL injection/XSS/CSRF, or to install fail2ban. All of those things take higher priority in my mind.
Oct
11
revised 2 comparable hashes generated from one string
added 108 characters in body
Oct
11
comment Is there any restriction in using lossless compression algorithms for huge key sizes?
For storing the private key, you can store the seed that you used to get the key instead. You should be able to fit a pretty good seed in 24 bytes.