3,447 reputation
1519
bio website
location United States
age
visits member for 2 years, 9 months
seen 17 mins ago

7h
comment Rainbow table for DES with all-zero plaintext?
eprint.iacr.org/2005/207 $\:$ eprint.iacr.org/2006/127 $\;\;\;\;$
7h
comment Is MAC-then-encrypt with stream ciphers secure?
The problem is 1; an attacker must never see authenticated plaintext. $\;$
8h
comment Is MAC-then-encrypt with stream ciphers secure?
You assumed too much. $\:$ (There's really nothing else to say.) $\;\;\;\;$
8h
comment Rainbow table for DES with all-zero plaintext?
See page 6. $\;$
9h
comment Why is MAC using nonce+message+hash(nonce+message+identifier) not the standard?
@otus : $\:$ If "message" means plaintext rather than ciphertext, then that's right. $\hspace{1.67 in}$
12h
revised Is there a generic attack on encrypted CRC32 when used as a MAC?
added an attack that uses less resources
12h
comment Is there a generic attack on encrypted CRC32 when used as a MAC?
Also, since the CRC computes over headers as well, "plaintexts" from four comments ago should be interpreted as "header/data pairs". $\;$
12h
comment Is there a generic attack on encrypted CRC32 when used as a MAC?
@Antikithira : $\:$ Do the outputs distinguish between invalid padding and invalid CRC? $\hspace{1.3 in}$
14h
comment Different padding rules for Merkle-Damgard and Keccak/sponge function
... by their length and probably also by what they start with. $\;$
17h
comment Why is MAC using nonce+message+hash(nonce+message+identifier) not the standard?
Let us continue this discussion in chat.
17h
comment Why is MAC using nonce+message+hash(nonce+message+identifier) not the standard?
@Joshua : $\;\;\;$ Should your comment have "the MAC becomes" instead of "MAC is"? $\:$ I can't figure out how to parse what you wrote. $\;\;\;\;\;\;\;$
19h
comment Why is MAC using nonce+message+hash(nonce+message+identifier) not the standard?
@otus : $\:$ I just edited in an example. $\;\;\;\;$
19h
revised Why is MAC using nonce+message+hash(nonce+message+identifier) not the standard?
gave an example
20h
comment Why is MAC using nonce+message+hash(nonce+message+identifier) not the standard?
It's a "just do it" construction that I'll describe later. $\;$
20h
answered Why is MAC using nonce+message+hash(nonce+message+identifier) not the standard?
22h
comment Why is MAC using nonce+message+hash(nonce+message+identifier) not the standard?
If the plaintext message had been modified, then a secure MAC would be overwhelmingly likely to catch that. $\:$ However, there exist encryption schemes such that one can easily modify a single ciphertext so that whether or not that modifies the plaintext depends in a predictable-and-useful way on what the plaintext message was. $\;\;\;\;$
22h
comment Why is MAC using nonce+message+hash(nonce+message+identifier) not the standard?
... where "it" is ...? $\;$
22h
comment Secure way to store fixed size string of digits
Should the data about the user otherwise stay private? $\:$ What is the size of your strings of digits? $\hspace{.5 in}$
23h
comment Is there a generic attack on encrypted CRC32 when used as a MAC?
@Antikithira : $\:$ Also, is the CRC computers over Headers too or just Data? $\hspace{1.62 in}$
23h
comment Secure way to store fixed size string of digits
Are you assuming the user exists and testing whether they have a given identifier, or testing whether there exists a user with a given identifier? $\;$