Reputation
Next tag badge:
46/100 score
28/20 answers
Badges
1 6 21
Newest
 Yearling
Impact
~43k people reached

Jul
3
comment The encryption scheme is secure?
"Also, the question should" ... $\;$
Jul
3
revised Mutual verification of shared secret
strengthened big paragraph
Jul
2
revised Mutual verification of shared secret
gave Dovathan's result
Jul
2
comment Does authenticated encryption add any protection to a signed digital envelope?
My impression of the reason for sign-encrypt-sign is it helping when the PKE scheme is not CCA-secure. $\:$ (A CCA attack would probably involve some invalid ciphertexts, and the outer signature would identify the responsible party.) $\;\;\;\;$
Jul
2
comment Mutual verification of shared secret
@codebeard : $\:$ Have you looked at his other answer to this question? $\;\;\;\;$
Jul
2
comment “123456” and “password” as crack standards
@Ghedipunk : $\:$ Well, either Bcrypt or Scrypt. $\;\;\;\;$
Jul
2
revised Mutual verification of shared secret
mentioned lower bound
Jul
1
comment Does authenticated encryption add any protection to a signed digital envelope?
Is "that structure" just the PK-encrypted-symmetric-key, or that together with $\hspace{1.78 in}$ the symmetrically encrypted plaintext? $\;$
Jul
1
revised Mutual verification of shared secret
removed non-proof
Jul
1
comment Mutual verification of shared secret
(I don't see how the next-to-last sentence of this answer helps, since one could just have the $x$ and $y$ be chosen by only-revelaed-to-one-party coin flips, with no fairness needed for those flips.) $\:$
Jul
1
comment Mutual verification of shared secret
As far as I can see, the equality protocol might also be "only secure for malicious adversaries but not $\hspace{.37 in}$ for fail-stop adversaries." $\:$ How do you handle that possibility? $\;\;\;\;$
Jul
1
revised Mutual verification of shared secret
fixed typos in my non-proof
Jul
1
comment Mutual verification of shared secret
The paper I used for $\hspace{.04 in}f$'s definition proves that $\hspace{.04 in}f$ can be fairly computed. $\:$ (Thus, either that paper is wrong or the "proof" in the bottom 2/3 of my answer is not valid.) $\;\;\;\;$
Jul
1
comment Mutual verification of shared secret
How is it that "the above" is a proof but what I just added to my answer is not valid? $\:$ Also, the paper you linked to "only considers finite functions (where the size of the domain is not dependent on the security parameter)", whereas equality has an infinite domain. $\;\;\;\;$
Jul
1
revised Mutual verification of shared secret
added in what Yehuda Lindell should see
Jul
1
comment Mutual verification of shared secret
(Okay, I did not realize you were an author for that paper.) $\:$ However, where above did you show that that paper's result does NOT cover the equality function? $\;\;\;\;$
Jul
1
comment Mutual verification of shared secret
I am very far from sure that will go through; see section 4, which starts on page 16. $\hspace{1.51 in}$
Jun
30
comment Simulation aborted because the adversary doesn't use the random oracle
Do you really need perfect simulation? $\:$ (For general PKE purposes, computational simulation is enough.) $\;\;$
Jun
30
comment Mutual verification of shared secret
@StephenM347 : $\;\;\;$ In the last sentence of your bounty message, is "It" having "two parties establish a shared key, such that either they both know the key or neither do" or what the OP asked about? $\:$ I don't see any way to formalize what you described in the middle sentence of your bounty message, and I also do not see why the ability to do what the OP asked about would suffice for such a formalization. $\;\;\;\;\;\;\;\;$
Jun
28
comment Block Ciphers - Standardize plain text
en.wikipedia.org/wiki/Padding_(cryptography)#Bit_padding $\;$