Reputation
4,861
Next tag badge:
50/100 score
30/20 answers
Badges
1 6 21
Newest
 Yearling
Impact
~45k people reached

Mar
31
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
His salt is far from "entirely pointless". $\:$ Salts can be used to defend against time-memory tradeoffs. $\hspace{.2 in}$ How could Eve "decrypt everything afterwards"? $\;\;\;\;$
Mar
31
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
"will be" $\: \mapsto \:$ "will not be" $\;\;\;$ ? $\;\;\;\;\;\;\;\;$
Mar
28
comment Stacked LFSR - why not used?
The alternating step generator is close-enough that I doubt there's a name for your generalization. $\hspace{.59 in}$
Mar
28
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
(Note that your most recent edit does not fix the problem.) $\;$
Mar
28
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
That still does not work with the standard meaning of "know". $\;\;\;$ With any standard meaning of "know", Mallory could know $\: A_{\hspace{-0.02 in}1}\hspace{.03 in}||\hspace{.04 in}A_2 \:$ without knowing $A_{\hspace{-0.02 in}1}$ and without knowing $A_2$. $\;\;\;\;\;\;\;\;$
Mar
27
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
... In that case, you should mention that you're using a non-standard definition of "know". $\;$
Mar
27
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
You should put that into your opening post. $\;$
Mar
27
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
That wouldn't "qualify it as 'secure'". $\:$ Similarly, my "argument could also be used to say public" key encryption is "insecure, because it allows you to check your guesses for the private key." $\:$ (Both of those sayings would hopefully be incorrect, since it's supposed to be infeasible to guess the private key.) $\hspace{.33 in}$
Mar
27
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
No, since that would let Mallory check her guesses for the concatenations of the answers. $\hspace{1.03 in}$
Mar
25
revised Does perfect secrecy imply uniform ciphertext distribution?
explained non-uniformity
Mar
25
answered Does perfect secrecy imply uniform ciphertext distribution?
Mar
25
comment Cycles in SHA256
The identity function is a permutation for which one would get $\: n = 1 \;$. $\;\;\;\;$
Mar
23
revised credit card number encryption using aes-ctr mode
improved grammar and changed spacing
Mar
22
revised How are RSA and ElGamal compatible in PGP?
fixed grammar and improved spacing
Mar
21
comment Is this an example of a zero knowlege proof?
What do you think would be a simulator for the adversary that $\hspace{2.49 in}$ generates messages just like an honest verifier? $\;$
Mar
21
answered Coding of unsigned int to prevent guessing next ID
Mar
21
comment Is it safe to prefix the a key with a known value?
It looks like HMAC can even use any bit-string as a key. $\;$
Mar
20
comment HMAC tag to verify the key (verification in the reverse direction)
Universal hash families provably achieve your goal. $\;$
Mar
18
comment Applying Trapdoor Function directly to plaintext
@Nova : $\;\;\;$ My "attack also works with a hashed input", however, I don't see why that makes the scheme mentioned in hvuong91's comment at 04:45:27Z insecure. $\:$ (Is "his/her mentioned scheme" different from that one?) $\;\;\;\;\;\;\;\;$
Mar
18
comment Applying Trapdoor Function directly to plaintext
@Nova : $\;\;\;$ Perhaps, but in any case, I hadn't noticed that comment. $\:$ "Why does" what "become insecure if we don't do that"? $\;\;\;\;\;\;\;\;$