Reputation
354
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 8
Impact
~2k people reached

Nov
15
comment Is TEA considered secure?
@user54609 Sure, but all my non-microcontroller systems have AES-NI :)
Nov
14
comment MD5 Hash outputs not produced
@MaartenBodewes I agree.
Nov
13
answered Prevent replay attack without storage
Nov
13
answered MD5 Hash outputs not produced
Nov
13
comment Where can I get the correct and precise algorithms for elliptic curve cryptography?
Wikipedia! It's a very reliable source. :-P
Nov
13
comment Prevent replay attack without storage
Also, I don't see how this prevents replays of mote data. It authenticates the base, but not the mote. If the base doesn't store R, it has no way of knowing if the mote sent the right R+2 in step 3.
Nov
13
comment Prevent replay attack without storage
Wait, so the base can store received data but not session info?
Nov
13
comment Could eVoting on the bitcoin blockchain be done?
A good way to mitigate this would be to bind the satoshi given to the citizen to a multisig address, with the government's key as the other signature. Then, after physical presence at the polling place, the second signature is given.
Nov
13
comment Is TEA considered secure?
@user54609 One of the reasons that AES is so versatile is that when you need speed, you can treat those unusual field operations as just another lookup table.
Nov
13
comment A “one time pad” can be thought of a Vigenere cipher with
@SimonJohnson They didn't say it had an infinitely long key, just that it can be thought of as a cipher with an infinitely long key.
Oct
18
awarded  Citizen Patrol
Sep
21
comment Compact digital signature for noisy data
@fgrieu Can you explain what you mean by "disregard for correlation (if any) between adjacent symbols"?
Sep
21
comment Compact digital signature for noisy data
@fgrieu Well, it would handle a few bitflips, but my bad. I was kind of thinking you might be asking for something that worked for arbitrary metrics because you wanted something like that as your arbitrary metric. I'll keep looking, focusing more specifically on Euclidean distance
Sep
21
comment Compact digital signature for noisy data
@fgrieu Take a look at ssdeep. It might be what you need. In any case, I suggest separating the hash and signature steps; instead of rolling your own special crypto that can detect differences, use standard, vetted crypto against a hash function designed for your purposes. That way you have very specific and testable potential failure modes.
Sep
21
revised AES S-Box Affine Mapping - how to do it?
Replace unescaped apostrophes with HTML entities
Sep
20
comment Compact digital signature for noisy data
Instead of signing the message, or a hash, why don't you sign a fuzzy hash?
Sep
20
suggested approved edit on AES S-Box Affine Mapping - how to do it?
Sep
18
comment Birthday-attack calculation in planning password salting strategy
Never underestimate the number of users whose password is "password".
Sep
18
comment Is it not secure if we use weak passwords to protect exported PKCS #12 files with private keys?
@MaartenBodewes In my research on this stimulating subject, I seem to have found that Mac OS 10.6 introduced kSecAttrIsExtractable, even though it's not exposed in the GUI, so I guess my original point about Windows being the only platform dumb enough to offer an unenforceable guarantee of non-exportability wasn't correct. No way it'll happen on Linux though! crosses fingers
Sep
18
comment Is it not secure if we use weak passwords to protect exported PKCS #12 files with private keys?
@MaartenBodewes Only on mobile would the kernel be considered something that's not under the user's control! Still though, that's a good point. Android not so much, but iOS on devices with an A7 or later chip have a smart-card-like thing called the Secure Enclave that provides hardware protection to keychain elements. Still, on iOS it's not so much that you can mark a key as non-exportable as that there is no API for exporting keys at all. It's more neglect than a security guarantee, and might change in the future.