157 reputation
6
bio website blog.thnx.tk
location Shanghai, China
age 21
visits member for 7 months
seen Jan 25 at 18:38

Yet another iPhone developer.


Nov
6
comment How to design a secure data container?
@D.W. I also have licensing issue if GPG is employed.
Nov
5
comment How to design a secure data container?
@Reid Add some more chunk specs to allow nonce and chain of trust.
Nov
5
comment How to design a secure data container?
I am looking at a format that can both be sent and stored still. All hardware handling it may not have adequate computing power to do cryptography a lot so this container can be sent and stored across them without the need of decryption.
Nov
5
revised How to design a secure data container?
Protocol expansion
Nov
4
asked How to design a secure data container?
Sep
26
comment Can I construct a feasible stream cipher out of HMAC and a secure hash algorithm?
Well I am considering a container format that allows multiple binary streams combined into one concrete block. I am considering GNU tar as the container and use some significant file names.
Sep
26
answered Using Whirlpool hashing function to encrypt data
Sep
26
awarded  Commentator
Sep
26
comment Is it safe to use GZIP to avoid padding related attacks
@CodesInChaos Um I covered the magic numbers in fixed locations with random numbers.
Sep
24
accepted Is it safe to use GZIP to avoid padding related attacks
Sep
24
accepted With a true random number generator at hand, how to implement one-time pad?
Sep
23
answered Using Whirlpool hashing function to encrypt data
Sep
22
comment With a true random number generator at hand, how to implement one-time pad?
@AlexandreYamajako I can toss SD cards around without raising suspicion and all machines in my team have built-in SD card readers. Also, I have written a program on it to allow anyone obtain 1KB of fresh randomness in a contained network.
Sep
22
comment Is it safe to use GZIP to avoid padding related attacks
I do have MAC (SHA512-HMAC of ciphertext) but it is implemented on a container level. (I cannot let the cipher text out simply)
Sep
22
awarded  Teacher
Sep
21
asked With a true random number generator at hand, how to implement one-time pad?
Sep
21
comment Can I construct a feasible stream cipher out of HMAC and a secure hash algorithm?
@B-Con If so, any suggestion on container format? I need a container to put ciphertext, IV and MACs of them in a single package. Any consideration on that?
Sep
21
answered Can we design a public-key infrastructure without certificate authorities?
Sep
20
comment Can I construct a feasible stream cipher out of HMAC and a secure hash algorithm?
@tylo Packaged and published, but with a strong disclaimer and deprecation mark. I submitted this algorithm to some academic institution for evaluation though.
Sep
20
comment Is it safe to use GZIP to avoid padding related attacks
@CodesInChaos Umm I think this padding itself is somewhat resistant to padding oracles - gzip itself is not deterministic and the padding is totally random. (gzip have some internal structure to determine the end of file, so appending bytes after it does not break it.)