Reputation
4,816
Next tag badge:
50/100 score
29/20 answers
Badges
1 6 21
Newest
 Yearling
Impact
~45k people reached

Jul
5
revised Mutual verification of shared secret
improved generalized protocol
Jul
5
revised Mutual verification of shared secret
added in protocol using time-lock puzzles
Jul
4
revised Mutual verification of shared secret
moved warning up and gave reasons why huge improvements aren't possible
Jul
4
revised Mutual verification of shared secret
fixed security flaw and strengthened claim
Jul
4
comment Does authenticated encryption add any protection to a signed digital envelope?
@Sergio : $\:$ If the PKE scheme is CCA-secure, then sign-then-encrypt done properly will be optimal, since it will also hide the sender's identity from everyone other than the receiver. $\;\;\;\;$
Jul
4
revised Mutual verification of shared secret
fixed error and simplified construction
Jul
3
revised Mutual verification of shared secret
fixed a typo and made minor improvements
Jul
3
revised Mutual verification of shared secret
gave construction; my instinct was wrong
Jul
3
revised Easy explanation of “IND-” security notions?
converted French? to English
Jul
3
comment Easy explanation of “IND-” security notions?
Another notion is IND-CCA1. $\;$
Jul
3
comment Easy explanation of “IND-” security notions?
Where have you seen IND-CCA3? $\;$
Jul
3
comment Using password-based encryption as a hashing scheme
I'm pretty sure the classic scheme uses password,salt instead of password+salt. $\hspace{1.05 in}$
Jul
3
comment The encryption scheme is secure?
"Also, the question should" ... $\;$
Jul
3
revised Mutual verification of shared secret
strengthened big paragraph
Jul
2
revised Mutual verification of shared secret
gave Dovathan's result
Jul
2
comment Does authenticated encryption add any protection to a signed digital envelope?
My impression of the reason for sign-encrypt-sign is it helping when the PKE scheme is not CCA-secure. $\:$ (A CCA attack would probably involve some invalid ciphertexts, and the outer signature would identify the responsible party.) $\;\;\;\;$
Jul
2
comment Mutual verification of shared secret
@codebeard : $\:$ Have you looked at his other answer to this question? $\;\;\;\;$
Jul
2
comment “123456” and “password” as crack standards
@Ghedipunk : $\:$ Well, either Bcrypt or Scrypt. $\;\;\;\;$
Jul
2
revised Mutual verification of shared secret
mentioned lower bound
Jul
1
comment Does authenticated encryption add any protection to a signed digital envelope?
Is "that structure" just the PK-encrypted-symmetric-key, or that together with $\hspace{1.78 in}$ the symmetrically encrypted plaintext? $\;$