Reputation
468
Top tag
Next privilege 500 Rep.
Cast close & reopen votes
Badges
3 10
Newest
 Necromancer
Impact
~7k people reached

  • 0 posts edited
  • 4 helpful flags
  • 198 votes cast
May
7
awarded  Necromancer
Apr
3
comment Is AES-256 a post-quantum secure cipher or not?
I was referring to 256 bit keys, though I was also using total WAGs, and I misstated the issue: it's more about energy available for computation than physical size.
Mar
16
comment Is AES-256 a post-quantum secure cipher or not?
"no set keysize is safe indefinitely" Yes, some key sizes are. I don't see anyone building a quantum computer the size of Jupiter or a classical computer larger than the universe any time soon.
Mar
7
comment With OpenSSL and ECDHE, how to show the actual curve being used?
OpenSSL 1.0.2 is now available and -brief is apparently part of it, by the way.
Jan
29
comment 1 Billion Bit Encryption?
How about 9 trillion bit cryptography?
Nov
2
comment Is a RSA 2048 bits public key secure
What kind of explaining would it take to convince you? You've already read explanations. What can we say? Have you read other related questions on this website or IT Security?
Nov
2
comment Is a RSA 2048 bits public key secure
FYI, the extra 14 bytes are due to the file format used to store the key, as explained here.
Oct
9
comment Do Export Restrictions Still Apply To The Key Length of RC4?
Given that RC4 is a horrible cipher, with worrisome public cryptanalysis and plausible rumors that NSA can break it, they would likely be quite happy for you to use it, regardless of key size.
Sep
20
answered Why is the P-521 elliptic curve not in Suite B if AES-256 is?
Sep
19
awarded  Yearling
Aug
23
comment RSA and ECDSA Certificate Sizes
Ohhh. I totally misunderstood your question. I'm sorry. I think there have been one or two certificate size-related questions here or Crypto, but I don't have any information off the top of my head. I suppose you could create some certs and find out. It can be pretty variable depending on the meta data in the cert, no? (e.g. the length of your domain, of the CA's name...).
Aug
22
comment Is this a plausible PBKDF?
I'm not encouraging you to use unproven schemes, but if you're interested in learning, you might like to follow the Password Hashing Competition. You might find the submissions interesting, and a couple years from now there should be some nice new password hashing algorithms available. For now, use PBKDF2, bcrypt or scrypt, of course.
Aug
21
awarded  Informed
Aug
21
answered Private Key - Memory Lifecycle
Aug
6
comment How many degrees of freedom up my sleeve?
@owlstead I'm having trouble finding what I was thinking of. There's been so much arguing about curves, after all. DJB's post at the top of the page, A few good primes, discusses choices of primes, and I recently read an older post on the curves list by Trevor Perrin listing variables in a Brainpool-style curve.
Aug
6
comment How many degrees of freedom up my sleeve?
There's been a similar discussion of elliptic curve "rigidity" recently. If you're curious, look for one of the CFRG threads where DJB kicks someone's butt, IIRC.
Jul
7
awarded  Critic
Jul
7
awarded  Citizen Patrol
Jun
21
comment DH “prime size” security in OpenSSL
By the way, you don't need to generate your own parameters. You can use, for example, get_rfc3526_prime_2048 to load some standard ones.
Jun
16
comment AES VS PRNG+HASH+XOR
You've invented a slightly odd and complicated stream cipher. It would be simpler to use an actual stream cipher (e.g. ChaCha or AES-CTR ;-) instead of the undefined "PRNG" and remove the hashing. (I'm avoiding subject of authenticated encryption.)