Reputation
5,952
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
1 8 22
Newest
 Informed
Impact
~66k people reached

Apr
7
revised Is there any IND-CPA secure stream cipher with a “standard” hardness assumption?
fixed typo
Apr
7
answered Is there any IND-CPA secure stream cipher with a “standard” hardness assumption?
Apr
6
comment Is it safe to use the same IV for multiple encryptions in AES CBC mode when you are always encrypting random bytes?
Note that, like basically all non-authenticated modes, CBC on its own will still be malleable. ​ ​
Apr
3
comment How is it possible that $g^q \equiv 1 \pmod p$ for a generator g?
crypto.stackexchange.com/a/831/991 ​ ​
Apr
2
revised If we should not reuse primes in DH, shouldn't we not reuse ECDH elliptic curve properties?
remembered tiny possible improvement
Apr
2
revised If we should not reuse primes in DH, shouldn't we not reuse ECDH elliptic curve properties?
mentioned amortization
Apr
2
answered If we should not reuse primes in DH, shouldn't we not reuse ECDH elliptic curve properties?
Mar
31
revised What are the minimum constraints on RSA parameters and why?
fixed stupid error
Mar
30
comment Does security exists in this pairing-based encryption scheme
I'm voting to close this question as a duplicate of ​ crypto.stackexchange.com/q/34095/991 . ​ ​ ​ ​
Mar
30
comment Authenticated encryption with Enc-Sign-Mac
@LukasSchüßler : ​ ​ ​ Is "authenticity and integrity of the" plaintext in the sense of [ciphertext decrypts to a proper plaintext]? ​ Otherwise, what you're after would seem to conflict with IND-CPA. ​ ​ ​ ​ ​ ​ ​ ​
Mar
29
comment Factoring large $N$ given oracle to find square roots modulo $N$
Do you know how to show that things have at most 2 square roots mod a prime? ​ ​
Mar
29
comment Authenticated encryption with Enc-Sign-Mac
Who will the third party be proving "authenticity and integrity of the message" to? ​ (A different third party?) ​ Is "the message" the plaintext or the ciphertext? ​ ​ ​ ​
Mar
28
comment Authenticated encryption with Enc-Sign-Mac
Enc-Sign-Mac doesn't hide the sender's identity from eavesdroppers. ​ ​
Mar
27
revised Lightest symmetric, fixed key, “Format preserving Encryption” algorithm?
fixed spelling and improved grammar
Mar
27
comment I homebrewed an algorithm. Is it secure?
This is at most one-time secure, since otherwise rpass will be reused. ​ ​
Mar
26
revised Authenticated encryption with Signatures
fixed after actually reading malexmave's link
Mar
25
comment Is this session start protocol secure?
No, since eavesdroppers can use ​ 3. & 4. ​ to check possible master passwords. ​ ​ ​ ​
Mar
25
comment Authenticated encryption with Signatures
If the MAC gets signed then you lose strong unforgeability with respect to verifiers that don't know the MAC key. ​ Otherwise, no. ​ ​ ​ ​
Mar
23
answered Authenticated encryption with Signatures
Mar
23
comment Combining public key signature schemes and private key encryption
@LukasSchüßler : ​ I just realized that for sign-then-encrypt, you'd need to make sure the lengths of the encodings of the [message,signature] pairs don't reveal more about the messages than the lengths of the messages. ​ ​ ​ ​