less info
687 reputation
bio website
location Europe
visits member for 2 years, 6 months
seen 17 hours ago

comment Is it secure to use the hash of key as the IV in AES encryption?
@Lacek Reusing an IV in CBC and CFB is not as bad, but it is still insecure. ECB should simply not be used. An example of mode which is in most cases still secure enough even if the IV is wrong or abused, is SIV.
comment How to collect, process, and transmit data securely?
I mostly disagree. Examples exist of protections based on obfuscation that practically withstood RE for years. Skype's protocol is one example: it was released 10 years ago and although some clever people published some partial analysis, and some others claimed to have partially reversed it, it is still considered unbroken in practice. Anyway, I don't believe obfuscation is cryptographically secure (so it's off topic here). I would rather say it could be made economically secure, if done properly.
comment Blind signature with openssl
It's not true that RSA padding makes blinding impossible. You simply blind/unblind the encoded message, as opposed to the original message.
comment Combating traffic analysis over request-response protocols
From the question I took that the confirmation message is irrelevant security wise.