5,319 reputation
1521
bio website
location Austria
age
visits member for 10 months
seen 50 mins ago

8h
reviewed No Action Needed How can rainbow tables be used for a dictionary attack?
9h
comment Is this an acceptable All-or-Nothing Transform?
@mpr regarding question 4: AONTs are per definition randomized transformations, i.e. same message transformed twice yields different outputs.
20h
comment How is the MD2 hash function S-table constructed from Pi?
It seems quite unlikely to get a permutation of 0...255 with some simple exponential pattern (whatever this is) from the decimal expansion of pi.
Jul
28
reviewed No Action Needed Implementing CD serial key system
Jul
28
answered Known plaintext attack on ElGamal encryption
Jul
27
revised Compression function to guarantee randomness of one time pads?
typo
Jul
27
comment A problem about zero knowledge proofs
What research have you done? We expect you to come here after having done some research. Btw what you are looking for is quite trivial and should be clear when having done a bit of reading. Hint: ElGamal or linear Encryption is not a bad idea (depending on which assumption you want to use in your pairing setting - DDH with (S)XDH or DLIN).
Jul
25
reviewed Close Are there any Javascript CSPRNGs?
Jul
25
answered Elliptic curve group over a prime finite field $F_p$
Jul
25
comment Elliptic curve group over a prime finite field $F_p$
If you want the ECDLP to be hard, you have to take a large subgroup of prime order (which is always cyclic). What do you mean by "OK to do this"?
Jul
25
comment Elliptic curve group over a prime finite field $F_p$
crypto.stackexchange.com/questions/15132/…
Jul
24
reviewed Approve suggested edit on Adding an IV to an AES implementation
Jul
24
comment Adding an IV to an AES implementation
You may have a look at modes of operation where you replace "block cipher encryption" by "AES".
Jul
24
reviewed No Action Needed How does a rolling code work?
Jul
24
reviewed Leave Open Why is MAC using nonce+message+hash(nonce+message+identifier) not the standard?
Jul
23
comment Textbook RSA with exponent e=3
Did you try the search here on crypto SE, e.g. for "RSA small exponent", before asking?
Jul
22
comment RSA with modulus n=p²q
Nice answer! Have not heard of ESIGN before!
Jul
22
comment How can I solve this modular equation?
In case your modulus is not prime you may look at the chinese remainder theorem to solve simultaneous linear congruences.
Jul
22
revised Advantages using Diffie-Hellman or Elgamal
added 232 characters in body
Jul
21
reviewed Close Best Asymmetric Encryption Standard for Communications?