14,519 reputation
22066
bio website pwnhome.wordpress.com
location
age
visits member for 2 years, 11 months
seen 2 hours ago

I like crypto. Need I say more?


16h
comment Is it secure to derive an AES key from a MAC?
@HannoBinder your idea is valid, but I don't necessarily think it is simpler.
19h
comment Is it secure to derive an AES key from a MAC?
@Augusto are you the OP? They seem reasonable to me. In any usable system there is going to be a point where security breaks.
1d
answered Is it secure to derive an AES key from a MAC?
1d
comment Is it secure to derive an AES key from a MAC?
Having never worked with HSM's, is there any sort of authorization with them? I.e., to prove that you are allowed to generate keys? An attacker stealing the database who also has access to the server with the HSM, could issue the random numbers to the HSM and get back the decryption keys.
1d
comment How does a chosen plaintext attack on RSA work?
Link only answers are not typically well received here. While the paper is a very good one, you should consider expanding by talking about what information the paper presents that is specifically related to the question.
2d
comment Trying to use XSalsa20 but the decrypted text breaks of halfway
@BaxDemon if otus's comment is the solution, let's just delete this. If it isn't, let's move it to StackOverflow. Let me know.
Aug
19
awarded  Good Answer
Aug
17
awarded  Announcer
Aug
15
comment Multiparty Computation with ORAM
To quote the paper DrLecter mentions "For simplicity, we focus only on the two-party (client/server) setting in the semi-honest model but it is clear that our definitions can be extended to the multi-party case with malicious adversaries." Having not read the paper, I can't tell you why it is clear. Perhaps it would be better for you to post why it isn't clear. What issues do you see with directly applying their work to the multi-party case?
Aug
15
answered Chosen plaintext attack on textbook RSA decryption
Aug
15
comment Chosen plaintext attack on textbook RSA decryption
When you say "I must generate a random $n$ from a range of $n-1$ values" do you mean "I must generate a random $r$ from a range of $n-1$ values"?
Aug
15
answered Subverting the key generation step in RSA public key cryptography
Aug
14
comment Chosen plaintext attack on textbook RSA decryption
Can you update your question using MathJax? It will make the equations much more readable. Also, what have you tried? Where are you stuck in solving it yourself?
Aug
14
comment Deciphering a Custom Encoding Scheme
What do they hope to gain by this exercise?
Aug
12
comment Multiparty Computation with ORAM
What do you mean by "better" when comparing with secret sharing?
Aug
10
comment $(k, n)$ threshold secret sharing to $(k+k', n + n')$ without reissuing all shares
How trustworthy are the parties who are given the shares?
Aug
10
comment $(k, n)$ threshold secret sharing to $(k+k', n + n')$ without reissuing all shares
Do you have an adversary model in mind?
Aug
7
awarded  aes
Aug
7
awarded  hash
Aug
6
awarded  Enlightened