Reputation
Top tag
Next privilege 250 Rep.
View close votes
Badges
6
Newest
 Commentator
Impact
~4k people reached

  • 0 posts edited
  • 0 helpful flags
  • 9 votes cast
Jul
11
accepted Is there any good reason to chain HMACs in this manner?
Jul
11
comment Is there any good reason to chain HMACs in this manner?
Thanks - excellent answer.
Jul
11
awarded  Commentator
Jul
11
comment Is there any good reason to chain HMACs in this manner?
No - this is code verbatim from the disassembler. I ran it through a couple of different ones as well, as I was seeing totally nonsensical output in some location. It would be fair to say the code quality is poor.
Jul
10
asked Is there any good reason to chain HMACs in this manner?
Aug
9
comment Specification of the Megamos crypto algorithm
Awesome answer. I wonder if someone taking a look at the software would leak more information without having to do any RE?
Aug
8
revised Specification of the Megamos crypto algorithm
added 1 characters in body
Aug
8
awarded  Teacher
Aug
8
revised Specification of the Megamos crypto algorithm
code -> binary for clarity.
Aug
8
answered Specification of the Megamos crypto algorithm
Jul
27
comment Specification of the Megamos crypto algorithm
The article is badly written - it really doesn't make clear what it means by "code(s)". Does it mean the algorithm? Or as per a lot of these secret algorithms, is there a key that is common across all cars?
May
21
awarded  Scholar
May
21
accepted What key length is required to keep simple keyed “hash” secure?
May
20
comment What key length is required to keep simple keyed “hash” secure?
My reading had led me to PRFs, but I was not confident that it was the correct term or the right way to think about this. Interestingly, you've touched upon one of my next questions.
May
20
comment What key length is required to keep simple keyed “hash” secure?
Thanks. The one-to-one mapping restricting the output set is very clear, I don't know why I didn't think of it.
May
20
comment What key length is required to keep simple keyed “hash” secure?
I have added the two things an attacker should not possibly do. Whilst a lot of those mappings might be poor, is there a better way of defining that? Is restricting it to one-to-one better?
May
20
revised What key length is required to keep simple keyed “hash” secure?
added 244 characters in body
May
20
asked What key length is required to keep simple keyed “hash” secure?
May
16
awarded  Student
May
16
comment Help me describe/identify this challenge-response protocol/algorithm?
I guess I should start another question about MACs where the input is the same length as output and key length is smaller.