3,690 reputation
1521
bio website
location United States
age
visits member for 2 years, 11 months
seen 3 hours ago

Jul
20
answered Allowing multiple password reset tokens, and a question on random number predictability
Jul
20
comment Security equivalent to Diffie–Hellman problem?
This assumes the group's order is known. $\:$ Also, if the group's order is a composite with a small factor and $b$ is chosen to be a unit modulo it, then as far as I can see this only gives a complexity-theoretic equivalence rather than a cryptographic equivalence. $\;\;\;\;$
Jul
16
comment Leak-proof protocol: is such a thing possible?
Using scrypt would reduce the leakage rate by making it more difficult to find a $\hspace{1.33 in}$ plaintext that will produce a suitable ciphertext. $\:$
Jul
12
comment Does CCA security imply authenticated encryption?
... in terms of existence of schemes or particular schemes? $\;$
Jul
12
revised How does recovering the public key from an ECDSA signature work?
fixed grammar
Jul
10
comment What is a proof of data possession that accounts for fake mirrors?
Alice can get a very low ping connection to one of the places and require that she receives a response faster than it would take for a light-speed signal to go back and forth between that place and the closest other relevant place. $\;$
Jul
9
revised How can I calculate the Rijndael SBox?
improved grammar
Jul
9
revised McEliece and cryptanalysis
removed extra spaces and changed "Mceliece" to "McEliece"
Jul
7
comment Password-based encrypted key storage?
"passphrase" $\: \mapsto \:$ "passphrase and salt" $\;\;\;\;$
Jul
3
comment Can a homomorphic encryption scheme be made CCA2 Secure?
You might find this paper interesting. $\;$
Jul
3
answered Problem with Python Implementation of Key Exchange part OTR Protocol
Jul
3
answered Is a keyed PRF a MAC?
Jul
3
revised Elliptic Curve Crypto, is a distributed signing method possible using Shamir's Secret Sharing?
improved grammar and changed spacing
Jul
2
awarded  Curious
Jun
30
comment Is there a standard way to use a nonce with HMAC?
One allows streaming the message without yet knowing the nonce. $\;$
Jun
26
comment Is there a way to compress multiple signatures of the same data?
@user127317 : $\;\;\;$ Do you need showings of ownership? $\:$ That does not necessarily disallow the latter. $\:$ You might be interested in some sort of undeniable multi-signature. $\;\;\;\;\;\;\;$
Jun
25
comment What is the quantum-resistant signature scheme with the smallest signature + pubkey?
@CodesInChaos : $\:$ Oh, yeah, that's right. $\;\;\;\;$
Jun
25
comment Exchanging session keys over symmetric-key channel?
"... in plain text", unless the symmetric encryption is forward-secure. $\;$
Jun
25
comment What is the quantum-resistant signature scheme with the smallest signature + pubkey?
My suggestion is from some reference I no longer remember to Winternitz signatures; this paper seems like a more modern reference. $\;$
Jun
25
comment What is the quantum-resistant signature scheme with the smallest signature + pubkey?
I would suggest replacing the 19s and 20s with $n$s and $(n\hspace{-0.04 in}+\hspace{-0.05 in}1)$s respectively for some positive integer $n$, replacing the 29s with the least positive integer $m$ such that $\: 2^{128} \leq (n\hspace{-0.04 in}+\hspace{-0.05 in}1)^{m+1} \;$, $\;$ and then replacing the 59s with $\:(2\hspace{-0.04 in}\cdot \hspace{-0.04 in}m)\hspace{-0.02 in}+\hspace{-0.02 in}1\;$. $\;\;\;\;$