464 reputation
110
bio website
location Brittany, France
age
visits member for 1 year, 1 month
seen 13 hours ago

Aug
21
answered Variants of AES?
Aug
18
comment Simple proof that shows AES is not a uniform permutation on any n-bit string?
an partial answer can be found in this question and its answer: crypto.stackexchange.com/questions/15612/…
Aug
18
comment Simple proof that shows AES is not a uniform permutation on any n-bit string?
I read a paper (an extract, actually) once that showed how all permutations used in cryptology have the same sign (positive , if I remember correctly). I cannot find it now, but that will show that AES permutations are strictly included into all possible permutations.
Aug
18
answered Attacking a hardware AES implementation if it leaks the intermediate round states
Aug
16
comment Multi-key decryption
Thank you for the useful edit.
Aug
16
revised Multi-key decryption
deleted 105 characters in body
Aug
16
comment Multi-key decryption
@owlstead thanks. Write down as an answer and added few details. Hope it is good.
Aug
16
revised Multi-key decryption
added the KEM/DEM paradigm
Aug
16
answered Multi-key decryption
Aug
13
comment Multi-key decryption
You'll find all the definition in one of the first papers about Broadcast Encryption: Broadcast Encryption by Fiat and Naor [courses.cs.vt.edu/cs6204/Privacy-Security/Papers/Crypto/…. It presents a symmetric key solution to the problem based on users as leafs on a binary tree.
Aug
13
comment Multi-key decryption
yes, it is essentialy broadcast encryption, as pointed in an other comment by @ChrisPeikert. It exists two kind of broadcast encryption: one where you name the intended recipients and the other one where you ban a subset of all potential recipients. The first one is similar to the pay-tv: you pay so you can decrypt the broadcast, the latter to the DVD encryption: all producer can play a DVD until the producer is banned.
Aug
8
revised RSA, finding p,q
error indicating $e$ as secret.
Aug
8
comment RSA, finding p,q
yes, I agree, sorry I correct the answer. (thanks!)
Aug
3
comment Using hashes as passwords
I don't think is secure: the hex output implies that you have a 16 elements alphabet. You should give a look to a pbkdf (password based key derivation function) as inspiration
Aug
3
comment About S-box in AES
No. The sbox are not linear.
Aug
3
comment Cryptographically Secure Hash Algorithm with Very Specific Property
As it has been told you it is not possible for a cryptographic hash function. Maybe you could check an other kind of family functions.
Jul
25
awarded  Yearling
Jun
18
awarded  Custodian
May
29
answered The improvement of the private key exponent in the M.Weiner Attack
May
12
awarded  Organizer