Reputation
4,468
Next tag badge:
46/100 score
28/20 answers
Badges
1 6 21
Newest
 Yearling
Impact
~43k people reached

8h
revised Mutual verification of shared secret
moved warning up and gave reasons why huge improvements aren't possible
9h
revised Mutual verification of shared secret
fixed security flaw and strengthened claim
13h
comment Does authenticated encryption add any protection to a signed digital envelope?
@Sergio : $\:$ If the PKE scheme is CCA-secure, then sign-then-encrypt done properly will be optimal, since it will also hide the sender's identity from everyone other than the receiver. $\;\;\;\;$
16h
revised Mutual verification of shared secret
fixed error and simplified construction
1d
revised Mutual verification of shared secret
fixed a typo and made minor improvements
1d
revised Mutual verification of shared secret
gave construction; my instinct was wrong
1d
revised Easy explanation of “IND-” security notions?
converted French? to English
1d
comment Easy explanation of “IND-” security notions?
Another notion is IND-CCA1. $\;$
1d
comment Easy explanation of “IND-” security notions?
Where have you seen IND-CCA3? $\;$
1d
comment Using password-based encryption as a hashing scheme
I'm pretty sure the classic scheme uses password,salt instead of password+salt. $\hspace{1.05 in}$
1d
comment The encryption scheme is secure?
"Also, the question should" ... $\;$
1d
revised Mutual verification of shared secret
strengthened big paragraph
2d
revised Mutual verification of shared secret
gave Dovathan's result
2d
comment Does authenticated encryption add any protection to a signed digital envelope?
My impression of the reason for sign-encrypt-sign is it helping when the PKE scheme is not CCA-secure. $\:$ (A CCA attack would probably involve some invalid ciphertexts, and the outer signature would identify the responsible party.) $\;\;\;\;$
2d
comment Mutual verification of shared secret
@codebeard : $\:$ Have you looked at his other answer to this question? $\;\;\;\;$
2d
comment “123456” and “password” as crack standards
@Ghedipunk : $\:$ Well, either Bcrypt or Scrypt. $\;\;\;\;$
2d
revised Mutual verification of shared secret
mentioned lower bound
Jul
1
comment Does authenticated encryption add any protection to a signed digital envelope?
Is "that structure" just the PK-encrypted-symmetric-key, or that together with $\hspace{1.78 in}$ the symmetrically encrypted plaintext? $\;$
Jul
1
revised Mutual verification of shared secret
removed non-proof
Jul
1
comment Mutual verification of shared secret
(I don't see how the next-to-last sentence of this answer helps, since one could just have the $x$ and $y$ be chosen by only-revelaed-to-one-party coin flips, with no fairness needed for those flips.) $\:$