174 reputation
7
bio website blog.thnx.tk
location Shanghai, China
age 21
visits member for 10 months
seen Jul 14 at 6:29

Yet another iPhone developer.


Jul
2
awarded  Curious
May
7
revised Is container format relevant to security of encrypted message inside?
Added the way MAC (or signature) is calculated
May
6
comment Is container format relevant to security of encrypted message inside?
@RickyDemer I forgot the asymmetrically encrypted symmetric key may appear in the file as well as key.bin. How to deal with that?
May
6
comment Is container format relevant to security of encrypted message inside?
@RickyDemer That is, algorithm should not appear in the container at all, and everything that is not MAC itself should be included in MAC?
May
6
asked Is container format relevant to security of encrypted message inside?
May
4
accepted How to design a secure data container?
Nov
6
comment How to design a secure data container?
@D.W. I also have licensing issue if GPG is employed.
Nov
5
comment How to design a secure data container?
@Reid Add some more chunk specs to allow nonce and chain of trust.
Nov
5
comment How to design a secure data container?
I am looking at a format that can both be sent and stored still. All hardware handling it may not have adequate computing power to do cryptography a lot so this container can be sent and stored across them without the need of decryption.
Nov
5
revised How to design a secure data container?
Protocol expansion
Nov
4
asked How to design a secure data container?
Sep
26
comment Can I construct a feasible stream cipher out of HMAC and a secure hash algorithm?
Well I am considering a container format that allows multiple binary streams combined into one concrete block. I am considering GNU tar as the container and use some significant file names.
Sep
26
answered Using Whirlpool hashing function to encrypt data
Sep
26
awarded  Commentator
Sep
26
comment Is it safe to use GZIP to avoid padding related attacks
@CodesInChaos Um I covered the magic numbers in fixed locations with random numbers.
Sep
24
accepted Is it safe to use GZIP to avoid padding related attacks
Sep
24
accepted With a true random number generator at hand, how to implement one-time pad?
Sep
23
answered Using Whirlpool hashing function to encrypt data
Sep
22
comment With a true random number generator at hand, how to implement one-time pad?
@AlexandreYamajako I can toss SD cards around without raising suspicion and all machines in my team have built-in SD card readers. Also, I have written a program on it to allow anyone obtain 1KB of fresh randomness in a contained network.
Sep
22
comment Is it safe to use GZIP to avoid padding related attacks
I do have MAC (SHA512-HMAC of ciphertext) but it is implemented on a container level. (I cannot let the cipher text out simply)