3,467 reputation
1519
bio website
location United States
age
visits member for 2 years, 9 months
seen 14 mins ago

Jul
10
comment What is a proof of data possession that accounts for fake mirrors?
Alice can get a very low ping connection to one of the places and require that she receives a response faster than it would take for a light-speed signal to go back and forth between that place and the closest other relevant place. $\;$
Jul
9
revised How can I calculate the Rijndael SBox?
improved grammar
Jul
9
revised McEliece and cryptanalysis
removed extra spaces and changed "Mceliece" to "McEliece"
Jul
7
comment Password-based encrypted key storage?
"passphrase" $\: \mapsto \:$ "passphrase and salt" $\;\;\;\;$
Jul
3
comment Can a homomorphic encryption scheme be made CCA2 Secure?
You might find this paper interesting. $\;$
Jul
3
answered Problem with Python Implementation of Key Exchange part OTR Protocol
Jul
3
answered Is a keyed PRF a MAC?
Jul
3
revised Elliptic Curve Crypto, is a distributed signing method possible using Shamir's Secret Sharing?
improved grammar and changed spacing
Jul
2
awarded  Curious
Jun
30
comment Is there a standard way to use a nonce with HMAC?
One allows streaming the message without yet knowing the nonce. $\;$
Jun
26
comment Is there a way to compress multiple signatures of the same data?
@user127317 : $\;\;\;$ Do you need showings of ownership? $\:$ That does not necessarily disallow the latter. $\:$ You might be interested in some sort of undeniable multi-signature. $\;\;\;\;\;\;\;$
Jun
25
comment What is the quantum-resistant signature scheme with the smallest signature + pubkey?
@CodesInChaos : $\:$ Oh, yeah, that's right. $\;\;\;\;$
Jun
25
comment Exchanging session keys over symmetric-key channel?
"... in plain text", unless the symmetric encryption is forward-secure. $\;$
Jun
25
comment What is the quantum-resistant signature scheme with the smallest signature + pubkey?
My suggestion is from some reference I no longer remember to Winternitz signatures; this paper seems like a more modern reference. $\;$
Jun
25
comment What is the quantum-resistant signature scheme with the smallest signature + pubkey?
I would suggest replacing the 19s and 20s with $n$s and $(n\hspace{-0.04 in}+\hspace{-0.05 in}1)$s respectively for some positive integer $n$, replacing the 29s with the least positive integer $m$ such that $\: 2^{128} \leq (n\hspace{-0.04 in}+\hspace{-0.05 in}1)^{m+1} \;$, $\;$ and then replacing the 59s with $\:(2\hspace{-0.04 in}\cdot \hspace{-0.04 in}m)\hspace{-0.02 in}+\hspace{-0.02 in}1\;$. $\;\;\;\;$
Jun
25
comment What is the quantum-resistant signature scheme with the smallest signature + pubkey?
As I vaguely alluded to in my previous comment, one can trade-off time for signature size. $\hspace{.98 in}$
Jun
25
comment What is the quantum-resistant signature scheme with the smallest signature + pubkey?
I said that, and that's what I did. $\:$ That link uses a significantly larger iteration count. $\hspace{1.33 in}$
Jun
25
answered What is the quantum-resistant signature scheme with the smallest signature + pubkey?
Jun
24
comment Exchanging session keys over symmetric-key channel?
en.wikipedia.org/wiki/Kerberos_(protocol) $\;$
Jun
24
comment What is the quantum-resistant signature scheme with the smallest signature + pubkey?
@CodesInChaos : $\:$ However, that doesn't help me figure out how much time verification takes. $\hspace{.69 in}$