Reputation
3,884
Top tag
Next privilege 4,000 Rep.
Access 'trusted user' tools
Badges
5 19
Newest
 Yearling
Impact
~32k people reached

Mar
19
comment Concatenation of two strong hashes may have striking weakness
I do not understand the final question. Are you looking for a preimage secure concatenation? Why $H_0= H_1=H$ does not work?
Mar
19
comment Can we reverse a hash when we know part of the input?
Having half of the message helps only if the message is shorter than twice the hash length.
Jan
28
comment How are the AES inverse S-Boxes calculated?
It is not clear how your inverse S-box is calculated exactly. It must be: 1) XOR 0x63; 2) Apply the matrix that is the inverse to the 0x1F matrix; 3) Compute the inverse in GF(256).
Jan
11
answered Difference between Pseudorandom Function vs randomly chosen function
Jan
6
comment (Re-)Using deterministic IV in CTR mode / How to: deterministic AES
What do you mean by SIV not available? What you're using is almost SIV.
Jan
6
answered Encryption for a short packet size
Jan
3
comment rotational cryptanalysis on modulo multiplication?
Bitwise permutations usually do not preserve the rotation distance.
Dec
26
comment Embedded devices Authentication, Integrity and Confidentiality
The key is device-dependent, it is "single" only for the purpose of encryption and authentication.
Dec
25
answered Embedded devices Authentication, Integrity and Confidentiality
Dec
15
comment rotational cryptanalysis on modulo multiplication?
Also, please mark the answer as valid if you consider it so.
Dec
15
comment rotational cryptanalysis on modulo multiplication?
I never tried a rotational attack with distinct rotation distances, so I do not know how it could work..
Dec
11
answered rotational cryptanalysis on modulo multiplication?
Nov
19
comment Do data-dependent rotations have any advantage over fixed rotations?
I also immediately recalled attacks on DynamicSHA and its relatives. I would also mention that the designers usually want to control diffusion, i.e. to ensure the avalanche effect. Data-dependent rotations make the diffusion probabilistic, thus troubling the upper bounds on differential and linear properties.
Oct
29
comment Encryption algorithm designed to be easy to decrypt by machine but impractical to decrypt by hand
What do you mean by variable keys? How about RC4?
Oct
25
awarded  Yearling
Oct
25
comment AES-GCM Disadvantage
I have tried to add the performance issue.
Oct
25
revised AES-GCM Disadvantage
added 154 characters in body
Oct
24
answered Is AES's parity key-dependent?
Oct
24
revised AES-GCM Disadvantage
added 113 characters in body
Oct
24
comment AES-GCM Disadvantage
You're right, I will correct.