3,249 reputation
418
bio website
location
age
visits member for 10 months
seen Aug 18 at 13:02

Aug
18
answered Simple proof that shows AES is not a uniform permutation on any n-bit string?
Aug
18
comment Attacking a hardware AES implementation if it leaks the intermediate round states
Any round key is sufficient to recover the master key.
Aug
15
awarded  Nice Answer
Aug
13
answered Security issues of a MAC-then-Encrypt-then-MAC approach?
Aug
10
reviewed Close AES256-CBC vs AES256-CTR in SSH
Aug
10
reviewed Leave Open Algebraic Normal Form Piccolo
Aug
10
reviewed Close Currently i am doing decryption for RSA encoding and i face some problem with it
Aug
1
answered Simple proof of work example?
Jul
31
answered AES-GCM Disadvantage
Jul
31
answered Encrypting or HMACing password digests
Jul
25
comment Is MAC-then-encrypt with stream ciphers secure?
Yes, I mean that you do not reuse the same MAC value for another plaintext.
Jul
25
comment Is MAC-then-encrypt with stream ciphers secure?
In your attack you do not reuse the MAC for other plaintexts.
Jul
25
comment Is MAC-then-encrypt with stream ciphers secure?
Yes. The MAC here is essentially an intermediate variable in the encryption procedure. A secure implementation shall never leak any intermediate variables.
Jul
24
answered Is MAC-then-encrypt with stream ciphers secure?
Jul
20
awarded  Enlightened
Jul
20
awarded  Nice Answer
Jul
18
answered Is TripleDES 168bit vulnerable to Differential Cryptanalysis?
Jul
17
awarded  Enlightened
Jul
17
awarded  Nice Answer
Jul
16
comment Does having a known plaintext prefix weaken AES256?
You're right :)