Reputation
3,011
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
1 12 30
Newest
 Necromancer
Impact
~47k people reached

Jan
18
revised Simply put, what does “perfect secrecy” mean?
minor typos
Jan
18
awarded  Necromancer
Oct
15
awarded  Yearling
Aug
22
awarded  Popular Question
Jul
30
awarded  Enlightened
Jul
30
awarded  Nice Answer
Jun
23
awarded  Constituent
Jan
14
comment What is a tweakable block cipher?
@StephenTouset: Changing a key can be very expensive if there is a key expansion routine to calculate (eg AES), whereas tweaking the message need not be. A common method is to take a blockcipher $E_k(\cdot)$ and define the tweakable blockciphers $E^T_k(M):=H(T)\oplus E_k(M \oplus H(T))$ where H is some finite field multiplication with its own secret key (ie $H(T):=T\cdot K_2$). Thus the whole calculation consists of two xors and one finite field multiplication, whereas to tweak the key would require recomputing the whole AES key schedule [as well as opening you up to related key attacks].
Nov
5
revised Why is OCB-AES mode not becoming a standard for authenticated encryption?
shameless hack to change my vote
Nov
5
comment Why is OCB-AES mode not becoming a standard for authenticated encryption?
Agreed, I disagree with my past self. When back at desk will try and hack that vote off
Oct
15
awarded  Yearling
Sep
30
awarded  Explainer
Jun
24
reviewed Leave Open In public key cryptography, how many keys are required for secure communication between n parties?
Jun
24
reviewed Leave Open how to truncate a PRF on n bits to PRF on t bits where t < n?
Jun
23
revised Are poly1305 authenticators distinguishable from random data?
Clarified first sentance - wasn't clear to me on first reading
Jun
20
comment Ballot box with multiple parties. All can read it, or none can read it
(Especially in a game explicitly built around misleading fellow players!)
Jun
19
reviewed Close Open source implementations of Symmetric Searchable Encryption and Order Preserving Encryption
Jun
19
comment Ballot box with multiple parties. All can read it, or none can read it
Woo, go Diplomacy! There are "Commitments" which might be worth considering - as in you make eacy player commit to their moves then reveal them later. The issue with using commitments is that someone could refuse to show their moves, but if they do this then you can just eject them from the game or similar. I can't think of a method where you could force players to both commit and to open their commitments.
Jun
18
reviewed Leave Open What are the consequences of not checking the server mac in a TLS connection?
Jun
18
comment Length-preserving all-or-nothing transform
"we can probably take any block cipher E of the desired block width" - Can you propose a scheme of optimally secure and arbitrarily sized block ciphers then?