14,065 reputation
21661
bio website pwnhome.wordpress.com
location
age
visits member for 2 years, 11 months
seen 3 hours ago

I like crypto. Need I say more?


Oct
1
comment RS Erasure Coding and Shamir's Secret Sharing
Let me spin it a different way. If I use 3-out-of-4 secret sharing, and I receive 4 shares and I am guaranteed that only 1 is corrupt, can I recover $s$? From above it seems the answer is no. If I use 2-out-of-4, however, I can.
Oct
1
comment RS Erasure Coding and Shamir's Secret Sharing
I appreciate the help. One more follow-up question. Say I have 4 parties and I want to share a secret $s$ such that I can tolerate 1 corrupt party. What parameters do I use for Shamir to be able to use RS decoding? Do I use 2 out of 4 secret sharing or 3 out of 4?
Sep
30
revised Are NIST's changes to Keccak/SHA-3 problematic?
added 582 characters in body
Sep
30
comment Are NIST's changes to Keccak/SHA-3 problematic?
@D.W. my comment was directed at K.G., not you or your post. Btw, I plan on adding discussion of those numbers to my answer, just don't have time at the moment.
Sep
30
comment Are NIST's changes to Keccak/SHA-3 problematic?
@K.G. Those numbers are correct if we are talking preimage attack. The numbers you give are correct if we are talking collision attack.
Sep
30
revised Are NIST's changes to Keccak/SHA-3 problematic?
added 1693 characters in body
Sep
30
comment Are NIST's changes to Keccak/SHA-3 problematic?
I meant an 80 bit security level. For example, 1024 RSA is around 80-bit security strength. With hash functions, it depends on the attack. A theoretical hash function with 160 bit output typically has an 80-bit strength against collision attacks but a 160-bit strength against preimage attacks. SHA3 does not follow this traditional notion though.
Sep
30
answered Are NIST's changes to Keccak/SHA-3 problematic?
Sep
28
comment Career advice for our readers
This site is really about the theory and practice of cryptography. This sort of question really doesn't fit the topic matter we are interested in.
Sep
25
reviewed Leave Open encryption and decryption time for RSA-crt in java?
Sep
25
reviewed Leave Open The use of cribs
Sep
25
reviewed Leave Open Can I use SHA1 as license key?
Sep
25
reviewed Leave Open Is the inverse of a secure PRP, also a secure PRP?
Sep
25
reviewed Leave Open With a true random number generator at hand, how to implement one-time pad?
Sep
25
reviewed Satisfactory Relationship between Elliptic Curve Discrete Log, Integer Discrete Log, and Integer Factorization
Sep
25
reviewed Excellent What criteria make the theta step of Keccak's round function reversible?
Sep
25
reviewed Excellent Generate Elliptic Curve Private Key from User Passphrase?
Sep
25
reviewed Excellent Will our app be FIPS 140-2 compliant if we use our own AES algorithm implementation?
Sep
25
reviewed Excellent What to watch for with openssl generating weak keys? (low entropy)
Sep
25
reviewed Satisfactory How to supply the GCM authentication tag to the OpenSSL command line tools?