SquareRootOfTwentyThree

less info
687 reputation
210
bio website
location Europe
age
visits member for 2 years, 6 months
seen 19 hours ago

Nov
4
revised RSA and prime difference
added 687 characters in body
Nov
3
comment RSA and prime difference
DSS does not cover DSA only anymore. It has been extended to include RSA and ECC. Indeed my question may be academic but I find it interesting. To say, what tells me that a 1026-bit $p$ and a 1022-bit $q$ are not actually more secure?
Nov
3
revised RSA and prime difference
added 64 characters in body
Nov
3
asked RSA and prime difference
Sep
28
awarded  Yearling
Sep
25
comment How practical are side-channel attacks and how much of a concern are they?
Uhm. You link two articles that advocate for more widespread measures against side channel attacks. However, both are authored by a company (now acquired) that sells such measures via patent licensing. Such company is (or was) definitely a serious and respectable one, but to me it does not look like a totally objective point of view.
Sep
12
revised How practical are side-channel attacks and how much of a concern are they?
added 42 characters in body
Sep
12
comment How practical are side-channel attacks and how much of a concern are they?
I agree the risk should be assessed (with the threat agent possibly being a market competitor) but that does not automatically imply that you will find a good motivation to address side-channel attacks. It's very hard to receive bad publicity out of a breach due to side channels attacks (which are today perceived as sophisticated attacks since they require some knowledge of statistics in most cases) unless the product is very widespread and there is a real brand to defend.
Sep
12
comment How practical are side-channel attacks and how much of a concern are they?
@fgrieu I have not used the word "econonomically" but only "rewards". Academic attacks, script kiddies, terrorists and so on don't go after money but they can still be modeled while doing risk analysis. Implementation of countermeasures is expensive, so I don't think they should be implemented "just in case".
Sep
12
answered How practical are side-channel attacks and how much of a concern are they?
Aug
24
answered Is it OK to use a data-encryption key for key wrapping, too?
Aug
16
comment What is the actual difference between security through obscurity and true encryption?
@stephen-harris Side channel attacks on cryptographic systems (which are nowadays a big threat, maybe more than cryptanalysis) are based on a priori knowledge of the cryptographic algorithm. If the algorithm is secret, SCAs become a lot harder (yet not impossible).
Aug
14
revised Common modulus attack on RSA when the 2 public exponents differ by a single bit
Summarized what the attack is about in the title
Aug
14
suggested suggested edit on Common modulus attack on RSA when the 2 public exponents differ by a single bit
Aug
6
revised How long does it take to extract a key from a FIPS-140 Level 2 device?
added 621 characters in body
Aug
6
answered How long does it take to extract a key from a FIPS-140 Level 2 device?
Aug
6
comment How long does it take to extract a key from a FIPS-140 Level 2 device?
This question belongs to security.SE
Aug
3
revised Which of these 3 AES 128 symmetric encrypt/decrypt routines is most secure?
added 42 characters in body
Aug
3
comment Which of these 3 AES 128 symmetric encrypt/decrypt routines is most secure?
The comparison was between GCM and CTR/CBC+HMAC, not between GCM and pure CTR/CBC. In that sense, oracle attacks are defeated in all three cases, isn't it?
Aug
3
answered Which of these 3 AES 128 symmetric encrypt/decrypt routines is most secure?