Reputation
4,771
Next tag badge:
50/100 score
29/20 answers
Badges
1 6 21
Newest
 Yearling
Impact
~45k people reached

1d
comment Attack on Double Encryption Scheme
Is the PKE scheme assumed to be CCA-secure? $\;$
1d
comment Signature and hash function properties
@YehudaLindell : ​ I mean you're pointlessly making a stronger assumption. ​ ​ ​ ​
1d
comment Signature and hash function properties
"collision resistance implies preimage resistance" only in the sense that second-preimage resistance also implies preimage resistance. $\;$
2d
comment CPA-security of a pseudorandom permutation encryption scheme
You appear to be missing the "prove that this scheme is CPA-secure for ..." part. $\;$
Jul
26
comment Show How to Efficiently Solve the Computational Diffie-Hellman Assumption given an Algorithm that Solves the Square-DH Problem
cross-posted from MSE after less than 2 minutes, and answered there $\;$
Jul
26
comment Example: pre-image resistance to second pre-image resistance
You would need to make the same tests as for any arbitrary construction: crypto.stackexchange.com/q/183/991
Jul
26
comment Converting a pre-image resistant hash to second pre-image resistant
The only better description I can think of would be a summary of the abstract. $\;$
Jul
26
revised Converting a pre-image resistant hash to second pre-image resistant
gave paper's title
Jul
25
answered Simulator in Private Outsourced Computation over Outsourced Datasets
Jul
25
revised Can a 1 byte difference in AES 128 bit keys make huge difference in output?
fixed title's grammar
Jul
24
comment Why is Chrome saying that “TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)” is an obsolete cipher suite?
security.stackexchange.com/a/88653/49075 $\;$
Jul
24
comment Why is Chrome saying that “TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)” is an obsolete cipher suite?
I suspect that key exchange mechanism does not have forward secrecy. $\;$
Jul
23
comment What is k in RSA?
No, since the image should have an open-parenthesis just before the $k$. $\;$
Jul
23
revised How can I generate a good password from a SHA512 hash?
general copy-editing
Jul
23
comment What is k in RSA?
You go to the "Computation" section of the page I linked to. $\;$
Jul
23
answered What is k in RSA?
Jul
23
revised How can I read the AE figures?
replaced noun-phrase with question and replaced "in-" with "input"
Jul
22
answered Converting a pre-image resistant hash to second pre-image resistant
Jul
22
comment Shuffleless PRNG function with non-repeating values?
There is a much cheaper and more efficient method; it just only does the $\hspace{1.76 in}$ currently-relevant parts of each shuffle. $\;$
Jul
22
comment Shuffleless PRNG function with non-repeating values?
"without shuffles/arrays" seems like a rather arbitrary requirement. $\;$