Reputation
17,384
Next tag badge:
97/100 score
38/20 answers
Badges
2 27 75
Newest
 Constituent
Impact
~431k people reached

1d
comment Cryptographic Disk wiping with quantum random data?
What measure of "efficiency" are you interested in?
1d
comment Creating disk image of encrypted disk
I'm going to migrate to SuperUser as it is a much better fit there. Hope you get some good answers.
1d
comment Cryptographic Disk wiping with quantum random data?
How efficient are the quantum random number generators?
1d
comment How broken is a xor of two multiply with carry generators?
Can you define "broken"?
2d
comment Simulation aborted because the adversary doesn't use the random oracle
@Yehuda Welcome to the site. I've read a number of your papers in the past. Glad to have you here.
2d
comment Why do some programming language API's not support private key passwords?
I'm going to migrate this to Security.se as it is a better place for this question. This site deals with more theoretical aspects of cryptography. Security.SE is more on the practical side.
2d
comment BKSQ Block Cipher implementation
Java Sorry but asking for software implementations is off topic here.
2d
comment Simulation aborted because the adversary doesn't use the random oracle
I created a chat room we can all use to discuss this more.
2d
comment Simulation aborted because the adversary doesn't use the random oracle
I don't understand how the adversary knows what the result should be but the simulator doesn't for incorrect (w/o RO) ciphertexts.
2d
comment Simulation aborted because the adversary doesn't use the random oracle
So it is predictable even without the special key? But impossible for the simulator to generate something that follows the predictability? In the real world, can one detect that the ciphertext is does not use the correct hash function?
2d
comment Simulation aborted because the adversary doesn't use the random oracle
Good question. I hope someone here can answer. From the adversary's point of view, given a specific input is the output of the alteration oracle predictable? If not, could you just return a random "ciphertext"?
Jun
29
comment Ideas for non duplicate cryptographically secure numbers
Use a cryptographically secure random number generator and generate 128-bit random numbers.
Jun
29
comment ElGamal scheme attack when one message is known and ciphertexts are intercepted
Why should I help someone named cryptohater? :)
Jun
29
comment “AND” concatenation of two secure PRGs
@nopenope how did you go from $\wedge$ to $\vee$? To me it seems simpler to observe that $Pr_{k,j\leftarrow H}[A(G'(k,j))=1] = 1/4$ because for the event to happen, $A(G(k))$ and $A(G(j))$ must both be $1$. Each will happen with probability $1/2$, assuming $k$ and $j$ are independent.
Jun
29
comment Double the key in block cipher - which approach is better?
Are you sure $m$ is not known to the attacker? Typically for a key-recovery attack, we assume it is. Also, if it isn't, both $E_1'$ and $E_2'$ are equivalent to the one-time pad (assuming the keys are properly chosen), which is impossible to break, even for a computationally unbounded adversary.
Jun
29
comment Double the key in block cipher - which approach is better?
How much storage space does the attacker have?
Jun
29
comment Double the key in block cipher - which approach is better?
Is $m$ a single block? Is $m$ known to the attacker?
Jun
29
comment Double the key in block cipher - which approach is better?
Like I said on your other question, what have you tried? Where are you stuck? This isn't a question answering service.
Jun
29
comment “AND” concatenation of two secure PRGs
What have you tried? Where are you stuck? This isn't a question answering service.
Jun
29
comment Extracting a WinRAR password
Let's continue this discussion in chat.