14,445 reputation
22066
bio website pwnhome.wordpress.com
location
age
visits member for 2 years, 11 months
seen 2 hours ago

I like crypto. Need I say more?


Oct
7
reviewed Reviewed How hard/easy will be to break a SHA-1 or SHA-256 hash if the attacker knows part of the original text?
Oct
6
comment Does BouncyCastle (for ECC) resist timing attacks?
Depends on how you use them. You'll have to describe the app and how the crypto is to be used.
Oct
4
comment My encryption message system & question about security
Authenticating the server won't fix the problem if the key exchange is still in the clear. You'd need a strong key exchange (diffie-hellman, SRP, etc), even then there will be a number of issues. Browser based crypto is hardly ever a good idea. Perhaps instead of describing your solution to a problem you should describe the problem in detail (leave out the solution) and there are probably some very standard crypto protocols that will solve your problem.
Oct
4
comment Please punch holes in this authentication scheme
Impressive! I didn't see the second attack you outlined when I looked through it. Probably an important lesson there :)
Oct
4
comment Please punch holes in this authentication scheme
Why does Alice encrypt $R_C$ instead of a random value?
Oct
4
answered My encryption message system & question about security
Oct
3
comment My encryption message system & question about security
What protects the key exchange?
Oct
3
comment My encryption message system & question about security
Let me see if I get this. Client sends a hash to the server. Server uses that to generate a key which is sent back to the client. That key is used for future GET and POST requests? What mode for AES are you using?
Oct
3
comment My encryption message system & question about security
Perhaps you could describe your encryption protocol in more detail here. For example, how is the message formatted/wrapped, how is the word turned into a key, what mode and cipher, etc. That way we don't necessarily have to go to your site, download your software, possibly reverse engineer it, etc just to see exactly what you are doing.
Oct
3
reviewed No Action Needed Calculating ciphersize of Paillier, SSE and OPE
Oct
3
comment Please punch holes in this authentication scheme
cleaned up comments dealing with minor mistake
Oct
3
reviewed Leave Open When NIST disallows the use of 1024-bit keys, what effect will that have on SHA-3 (with max. 512 bits)?
Oct
3
reviewed Leave Open Advise key management protocol
Oct
3
reviewed Leave Open Reordering non-block-aligned parts with DES in ECB mode
Oct
3
reviewed Close RSA vs El Gamal digital signature. Which is more secure?
Oct
3
reviewed Close Attribute-based cryptography
Oct
3
comment Attribute-based cryptography
Your question boils down to what language to use, if certain languages are better than others for implementing ABE, etc. This isn't really on topic here and is primarily opinion based.
Oct
3
reviewed Leave Open What are requirements for this grille?
Oct
2
comment NIST temporarily closed — will that have a negative impact on the future of cryptography?
"Thinking has not stopped." At least not everywhere.
Oct
2
answered Paillier Crypto System : Pros and Cons?