SquareRootOfTwentyThree

less info
776 reputation
212
bio website
location Europe
age
visits member for 2 years, 11 months
seen 4 hours ago

Sep
1
comment How to renew keys for a statically-encrypted database
@brent-longborough If you are sure 100% sure your nonce does not repeat (it does not necessarily needs to be random) GCM is perfectly fine and as good as SIV, with the benefit that you need just 1 AES key. GCM is quite difficult to implement in software though. If your security module does not support it already, maybe you could consider CCM and EAX: they are much simpler (EAX especially) but as secure as GCM.
Sep
1
revised How to renew keys for a statically-encrypted database
added 89 characters in body
Sep
1
answered How to renew keys for a statically-encrypted database
Aug
31
awarded  Scholar
Aug
31
accepted ASN.1 OID of bcrypt
Aug
30
asked ASN.1 OID of bcrypt
Aug
30
answered PKCS#11: Can C_GetMechanismInfo() return CKR_OK on a disabled mechanism?
Jul
14
revised AES-SIV security
Added more tags relevant to the question
Jul
14
suggested suggested edit on AES-SIV security
Jul
14
answered AES-SIV security
May
15
awarded  Organizer
May
15
revised PKCS#11: Which CKK_types are supported by CKM_PKCS5_PBKD2?
edited tags
May
15
answered PKCS#11: Which CKK_types are supported by CKM_PKCS5_PBKD2?
Feb
27
comment Why are RSA keys encoded with ASN.1 for TLS?
There are exploits that target buggy implementations of ASN.1, but not ASN.1 itself. In the same way, there are also exploits for XML implementations, but that does not mean that XML is bad. There could be also exploits for you custom hex encoding, no matter how simple.
Jan
9
answered Crypto USB Devices - where is the PIN/Password stored?
Nov
4
comment RSA and prime difference
I tried to clarify more.
Nov
4
revised RSA and prime difference
added 687 characters in body
Nov
3
comment RSA and prime difference
DSS does not cover DSA only anymore. It has been extended to include RSA and ECC. Indeed my question may be academic but I find it interesting. To say, what tells me that a 1026-bit $p$ and a 1022-bit $q$ are not actually more secure?
Nov
3
revised RSA and prime difference
added 64 characters in body
Nov
3
asked RSA and prime difference