meta user
network profile
| bio | website | pwnhome.wordpress.com |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 8 months |
| seen | 3 hours ago | |
| stats | profile views | 66 |
I like crypto. Need I say more?
|
Sep 17 |
comment |
Encryption scheme with equivalent keys? You say that without knowledge of the master secret, deriving equivalent keys should be infeasible. It is a requirement that the fact that there are equivalent keys be kept hidden? In other words, an attacker with access to your source code might be able to look at it and say "hey, if only I knew how to factor this large number (for example), then I could find multiple keys that all resulted in the same encryption." Does the system need to be able to defend against this or can an attacker know that equivalent keys exist but just not be able to find them? |
|
Sep 15 |
answered | BouncyCastle Elliptic Curve implementation |
|
Sep 14 |
comment |
BouncyCastle Elliptic Curve implementation Your first question about what the parameters are and what they do is on topic here. The correct implementation programatically part is probably not. I'll leave it here for a while and see if someone here can answer at least the first part. |
|
Sep 14 |
comment |
BouncyCastle Elliptic Curve implementation As your question is more about programming and less about cryptography, it is off topic here. StackOverflow might be a better place for this question (they even have a bouncy castle tag). What would you think if I migrated it to SO? |
|
Sep 13 |
accepted | How practical are side-channel attacks and how much of a concern are they? |
|
Sep 13 |
answered | fixing WEP by treating all messages as one long stream |
|
Sep 13 |
answered | What is safer: ZipCrypto or AES-256? |
|
Sep 13 |
reviewed | Approve suggested edit on How do ciphers change plaintext into numeric digits for computing? |
|
Sep 13 |
comment |
fixing WEP by treating all messages as one long stream A stream cipher. |
|
Sep 12 |
answered | How many keys does the Playfair Cipher have? |
|
Sep 12 |
comment |
How practical are side-channel attacks and how much of a concern are they? @FrancisW.Usher, that was definitely something I had thought about. I think it can be answered if someone knows the industry well enough. If most of the vendors out there are worried about this stuff and putting protections in their products, then there is good reason to believe that the attacks are possible (as the protections only add to cost, etc). We'll see, right. |
|
Sep 12 |
revised |
How practical are side-channel attacks and how much of a concern are they? edited title |
|
Sep 11 |
asked | How practical are side-channel attacks and how much of a concern are they? |
|
Sep 11 |
reviewed | Edit suggested edit on modulus condition |
|
Sep 11 |
revised |
modulus condition significance |
|
Sep 11 |
comment |
Security considerations for partially shared password databases @uosɐſ, I re-opened this question and closed the other as you requested. Since there were answers on the other, I have merged the two so that the answers would show up here. |
|
Sep 8 |
awarded | Revival |
|
Sep 8 |
awarded | Revival |
|
Sep 7 |
answered | Is it possible take a piece of data in secret? |
|
Sep 7 |
answered | What is the harm if I publish an encrypted RSA private key publicly? |
