Reputation
2,374
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
3 18
Newest
 Explainer
Impact
~52k people reached

Jan
10
comment Plain text size limits for AES-GCM mode just 64GB?
To use this better solution, you will probably need to deviate from the standard. If you just use an 88 bit nonce with a random implementation, it will hash that nonce into a 96 bit nonce and still use a 32-bit counter, which does not solve the problem.
Jan
5
comment Proof of RSA security dependent on public key exponent
Like I said, I am not entirely convinced. So I agree with your disagreement. It's complicated.
Jan
5
comment Proof of RSA security dependent on public key exponent
I have been told that large exponents (like 65537) reduce the consequences of certain implementation mistakes. One can therefore argue that a standard with exponent 3 will - on average - have weaker implementations than a standard with larger exponent. I am not entirely convinced...
Jan
4
reviewed Approve Counting points on elliptic curve over binary field
Dec
28
reviewed Approve Exchanging encrypted messages, and decrypting without a public key?
Dec
26
reviewed Approve How can I do minus on plaintexts in the Paillier cryptosystem?
Dec
25
reviewed No Action Needed What is the best current way to cryptographically secure databases?
Dec
25
reviewed Approve Is secp256r1 more secure than secp256k1?
Dec
25
comment Construct IND-CPA secure encryption scheme by combining two given schemes
Except that there is no inner scheme. I've added a proof sketch.
Dec
25
revised Construct IND-CPA secure encryption scheme by combining two given schemes
added 315 characters in body
Dec
24
comment Construct IND-CPA secure encryption scheme by combining two given schemes
So you understand how the construction works. Do you know how security proofs work in general?
Dec
23
comment Construct IND-CPA secure encryption scheme by combining two given schemes
I have added some text to the answer. Is it clear now?
Dec
23
revised Construct IND-CPA secure encryption scheme by combining two given schemes
added 375 characters in body
Dec
22
answered Construct IND-CPA secure encryption scheme by combining two given schemes
Dec
22
reviewed Approve Should I use ECB or CBC encryption mode for my block cipher?
Dec
16
reviewed Leave Closed Would SHA-1 be safe for certificates with short validity?
Dec
16
reviewed Leave Closed How can I study the math behind cryptography?
Dec
16
reviewed No Action Needed Authenticated Encryption of UDP packets
Dec
13
reviewed No Action Needed Does Coppersmith's method always finds non-trivial factor of integers of the form $n=a(2^k b+1)$ assuming $1 < a<2^k b +1$ and $b < n^{1/4-0.05}$?
Dec
13
reviewed No Action Needed 802.1X Radius WLAN protected by certificate 1024-bit key