821 reputation
312
bio website
location Europe
age
visits member for 3 years, 3 months
seen yesterday

Nov
5
awarded  Nice Question
Sep
28
awarded  Yearling
Sep
2
revised How to renew keys for a statically-encrypted database
added 184 characters in body
Sep
1
comment How to renew keys for a statically-encrypted database
@brent-longborough If you are sure 100% sure your nonce does not repeat (it does not necessarily needs to be random) GCM is perfectly fine and as good as SIV, with the benefit that you need just 1 AES key. GCM is quite difficult to implement in software though. If your security module does not support it already, maybe you could consider CCM and EAX: they are much simpler (EAX especially) but as secure as GCM.
Sep
1
revised How to renew keys for a statically-encrypted database
added 89 characters in body
Sep
1
answered How to renew keys for a statically-encrypted database
Aug
31
awarded  Scholar
Aug
31
accepted ASN.1 OID of bcrypt
Aug
30
asked ASN.1 OID of bcrypt
Aug
30
answered PKCS#11: Can C_GetMechanismInfo() return CKR_OK on a disabled mechanism?
Jul
14
revised AES-SIV security
Added more tags relevant to the question
Jul
14
suggested approved edit on AES-SIV security
Jul
14
answered AES-SIV security
May
15
awarded  Organizer
May
15
revised PKCS#11: Which CKK_types are supported by CKM_PKCS5_PBKD2?
edited tags
May
15
answered PKCS#11: Which CKK_types are supported by CKM_PKCS5_PBKD2?
Feb
27
comment Why are RSA keys encoded with ASN.1 for TLS?
There are exploits that target buggy implementations of ASN.1, but not ASN.1 itself. In the same way, there are also exploits for XML implementations, but that does not mean that XML is bad. There could be also exploits for you custom hex encoding, no matter how simple.
Jan
9
answered Crypto USB Devices - where is the PIN/Password stored?
Nov
4
comment RSA and prime difference
I tried to clarify more.
Nov
4
revised RSA and prime difference
added 687 characters in body