222 reputation
17
bio website
location
age
visits member for 3 years, 5 months
seen Feb 23 at 12:28

Feb
1
comment private keys for multiple devices
The reference implementation of Curve25519 is in C and is extremely portable. If you need more features, take a look at NaCl, which is also in C and provides easy ways to achieve most common cryptographic goals.
Jan
18
comment Combining a keystream generator with a block cipher
@Melab XOR is a bitwise equality test at it's heart, and that's all it's doing here. Blocks of zeros in the XOR operation show that the corresponding plaintext blocks are identical.
Jan
18
comment Combining a keystream generator with a block cipher
@Nova Many practical applications involve messages with identical blocks of plaintext. For example, DNS requests or ARP packets are identical except for a few bytes each.
Jan
18
comment Combining a keystream generator with a block cipher
@Melab Sure! XORing them just makes that easier.
Jan
18
comment Combining a keystream generator with a block cipher
@Melab It will produce contiguous blocks of zeros wherever the ciphertexts are identical, revealing the blocks with identical plaintext.
Jan
15
comment Possible to use an accumulator to “license” or restrict the qty of certificates being used?
@D.W.: You're right, I should have updated the question first.
Jan
15
revised Possible to use an accumulator to “license” or restrict the qty of certificates being used?
added 266 characters in body
Jan
15
comment Combining a keystream generator with a block cipher
The first point of the OP's analysis of his new algorithm says that it "does not fall prey to the problems that reusing a key plagues stream ciphers with." The whole point of the exercise was to be able to reuse keys, which, just like stream ciphers, it fails at.
Jan
15
comment Problem with implementing DES in python
@Newbie: Yeah, but I looked at your code, and you don't apply the P permutation after doing the S-boxes in compressBlock. You could do that inside the function called compressBlock, or you could do it after that call in roundFunction, but it's gotta be done somewhere. (As an aside, your function names aren't terribly conducive to debugging!)
Jan
15
awarded  Yearling
Jan
15
comment What kind of attack does the current brokenness of SHA-1 allow?
@v6ak I can generate an MD5 collision using an Amazon EC2 free trial, so it costs $0.00, meaning it would be infinitely harder to find a SHA1 collision. (My point being that that sort of comparison isn't very useful!)
Jan
15
answered Confused with the role of AES round keys
Jan
15
comment private keys for multiple devices
cr.yp.to/ecdh.html is the reference implementation, and it's actually really easy to use by itself, which is what I'd normally recommend. What platform and language are you working with?
Jan
15
comment Possible to use an accumulator to “license” or restrict the qty of certificates being used?
@makerofthings7: In that case, perhaps to avoid confusion you should edit the question with the updated requirements?
Jan
15
comment Possible to use an accumulator to “license” or restrict the qty of certificates being used?
@D.W.: But it does satisfy the revised requirements the OP and I worked out in the comments on my first answer, which complained about the requirements not being specific enough.
Jan
15
comment Possible to use an accumulator to “license” or restrict the qty of certificates being used?
@D.W.: Yeah, sure, it CAN, but by doing so it leaks its private key to the world, making all its signatures useless.
Jan
14
awarded  Critic
Jan
14
comment Combining a keystream generator with a block cipher
No, XORing two ciphertexts tells you which blocks in the plaintext are identical. That's a huge break.
Jan
14
comment Combining a keystream generator with a block cipher
But his analysis is NOT correct. He says his scheme "Does not fall prey to the problems that reusing a key plagues stream ciphers with," but it doesn't: reusing a key still breaks security, even if it's not as spectacular as getting the whole keystream back.
Jan
14
answered Combining a keystream generator with a block cipher