1,353 reputation
417
bio website
location Saarbrücken, Germany
age 27
visits member for 2 years, 10 months
seen 10 hours ago

Dec
2
comment What is the difference between, and security of $Z_p$ and $F_p$?
If $p$ is prime (and not 2 or 3), then $p-1$ is even and not equals to 2 and therefore cannot be prime.
Nov
26
revised How can Shamir's method for secret sharing work in the GF(256)?
edited body
Nov
22
comment Creating a secure key
In general, hashing (i.e. applying a collision resistant hash-function) is of course not a secure way to generate a key. However, our practical hash-functions are often assumed to be suitable for such tasks.
Nov
15
comment order between adversaries and type of resources given
From my experience CCA definitions that do not allow encryption queries are extremely uncommon. So a better way of putting that might be "Yes, unless you are using an uncommon definition of CCA that does not allow encryption queries."
Nov
10
comment Why don't we use MACs to store passwords?
I would like to add, that of course a MAC is generally no well suited for this task, because its common security definitions in no way guarantee any confidentiality. I.e. a MAC can be secure but leak the message, which makes this entire thing pointless. So for this to even make sense you would have require more than just a secure MAC. Some specific common MACs, such as HMAC, however would probably work.
Oct
18
awarded  Yearling
Oct
16
reviewed Close Repeated Encryption using same/different Encryption systems
Oct
16
reviewed Leave Open How is multiplication inverted in IDEA's decryption round?
Oct
16
reviewed Close Hill Cipher - Unknown plaintext attack, known key
Oct
16
reviewed No Action Needed Testing if a password for an eCryptfs mount is valid
Oct
16
reviewed Reviewed DSA generate signature and verify
Oct
9
reviewed Leave Open Is there a developer's resource that ties encryption methods and strengths to the appropriate usage scenarios?
Oct
9
reviewed Close WIN LM Password Hashes (using John the ripper)
Oct
9
reviewed Leave Open Reordering non-block-aligned parts with DES in ECB mode
Sep
23
comment How to decode an OTP message?
The question states, that it's encoded as 8-bit ascii, so no it cannot be a=1...
Sep
22
comment Reusing keys with AES-CBC
"keys must not be reused in AES-CTR" This claim is wrong. Keys can be safely reused in CTR mode, as long as the probability that the counter ranges intersect is negligible.
Sep
21
comment Proof that IND$-CPA implies IND-CPA?
Your reduction and analysis seem to be correct as far as I can see. Maybe you should consider editing the question to include the relevant definitions and putting your proof in an answer. As it currently stands, "Yes your proof is correct" seems to be a valid answer, but that would not be very interesting.
Sep
10
comment General-purpose non-interactive multi-party computation protocol
You should change your question. Whatever it is you are asking about, it's not multi-party computation. In a multi-party computation protocol, multiple parties compute a function on secret inputs from each party. There is no dealer and usually no partial results.
Aug
14
answered Is there a way to encrypt multiple sets of data into one result, with separate keys decrypting each set of data
Aug
11
reviewed Leave Open Is this an acceptable authenticated encryption?