15,728 reputation
22369
bio website pwnhome.wordpress.com
location
age
visits member for 3 years, 2 months
seen 2 hours ago

I like crypto. Need I say more?


Jul
30
comment Why use variable p, q, g for Diffie-Hellman?
@Nuoji, Openssl can do both. To generate, see this. To use groups defined in RFC 5114, see this
Jul
30
comment Why use variable p, q, g for Diffie-Hellman?
@Nuoji AFAIK, if you use safe primes, the risk is minimized. The order of subgroups will be either $2,p,2p$. You could easily detect order $2$ subgroups and order $p$ and $2p$ subgroups should be sufficiently large. If it isn't strong, it depends on how much work you are willing to do to check things out. You'd have to make sure the order isn't smooth and that the order of the (sub-)group is sufficiently large.
Jul
30
reviewed Approve suggested edit on understanding forking lemma
Jul
30
reviewed Approve suggested edit on quantum-cryptography tag wiki
Jul
30
reviewed Approve suggested edit on quantum-cryptography tag wiki excerpt
Jul
30
comment Security of CFB on a public channel
Can you explain the system in a little more detail? The broadcast server doesn't do any encrypting/decrypting right? Only the 2 parties. Are the other parties allowed to learn incorrect decryptions, etc?
Jul
30
comment Why use variable p, q, g for Diffie-Hellman?
@CodesInChaos, is that a little better?
Jul
30
revised Why use variable p, q, g for Diffie-Hellman?
added 463 characters in body
Jul
30
comment Why use variable p, q, g for Diffie-Hellman?
@CodesInChaos, yes, that was just the best example of a trapdoor I could come up with. You have a good point though.
Jul
30
revised Why use variable p, q, g for Diffie-Hellman?
deleted 52 characters in body
Jul
30
comment Why use variable p, q, g for Diffie-Hellman?
@CodesInChaos, you are right. Temporary memory-lapse :) Updated.
Jul
30
revised Why use variable p, q, g for Diffie-Hellman?
deleted 52 characters in body
Jul
30
answered Why use variable p, q, g for Diffie-Hellman?
Jul
29
comment Approaches to decoding data of an unknown type
This question appears to be off-topic because it is about encoding/decoding, not cryptography.
Jul
29
comment Approaches to decoding data of an unknown type
@Geuis, unfortunately I can't migrate it back. I guess you'll have to repost there.
Jul
27
reviewed Approve suggested edit on terminology tag wiki excerpt
Jul
27
reviewed Approve suggested edit on compression tag wiki
Jul
27
comment Specification of the Megamos crypto algorithm
Funny, I had seen on the usenix security page that the paper was presentation only. I was wondering why that was the case.
Jul
25
reviewed No Action Needed Could one construct a cipher that is secure for friendly parties to use but insecure for hostile parties?
Jul
25
reviewed Leave Open why hash(hash(str)) is bad?