3,589 reputation
519
bio website
location
age
visits member for 1 year
seen 10 hours ago

3h
awarded  Yearling
15h
comment AES-GCM Disadvantage
I have tried to add the performance issue.
15h
revised AES-GCM Disadvantage
added 154 characters in body
1d
answered Is AES's parity key-dependent?
1d
revised AES-GCM Disadvantage
added 113 characters in body
1d
comment AES-GCM Disadvantage
You're right, I will correct.
Oct
22
answered Proof that counter mode of operation and CBC mode are CPA secure when pseudorandom permutations?
Oct
20
answered Is it just as difficult to find a desired output in a hash digest, for MSB vs LSB?
Oct
15
comment AES: Guess Password using the unencrypted text?
What is the software you're using and the encryption mode exactly (CBC? CTR?).
Oct
11
comment Weak key schedule IDEA
This is my educated guess based on the evolution of block ciphers and contemporary theory. Serious block cipher research appeared later (for example, Daemen's PhD thesis from 1995).
Oct
9
answered Weak key schedule IDEA
Sep
30
awarded  Explainer
Sep
12
answered Regarding Key Strength with DES and Blowfish
Sep
11
comment AES-GCM Disadvantage
I would say that "authentication key" is a bit confusing. Could be better "Subsequent forgeries can be made almost instantaneously so that authenticity is no longer provided."
Sep
11
comment Are there cryptographic hash functions with homomorphic properties?
@poncho, yes, distributive properties like you describe will likely to reduce the collision security level (in bits) by the factor of 2 or so.
Sep
11
comment Are there cryptographic hash functions with homomorphic properties?
Maybe the author means some sort of homomorphism?
Sep
11
comment AES-GCM Disadvantage
I did not want to go further in the details about multiple forgeries, but if you want you may edit my answer.
Sep
10
comment Are there valid attacks on full SHA-1?
Yes, but the problem is that they compute SHA-256, not SHA-1.
Sep
9
answered Are there valid attacks on full SHA-1?
Sep
9
comment Are there valid attacks on full SHA-1?
Stevens' attack closely resembles earlier attacks by Wang's group (which has been also verified by the Austrian group). It is entirely differential-based. There is no "linear attack", there are linear conditions.