Reputation
5,952
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
1 8 22
Newest
 Informed
Impact
~66k people reached

Feb
22
comment Is XSalsa20-Poly1305-SIV a reasonable choice for nonce-misuse-resistant authenticated encryption?
If you're writing F's inputs in the usual order then that's certainly not necessarily secure. ​ ​
Feb
22
comment Is authenticated encryption unnecessary if the message is digitally signed?
See my comment to Richie's answer. ​ ​
Feb
22
comment Is authenticated encryption unnecessary if the message is digitally signed?
Message "authentication can be omitted ... appropriate digital signature" on the ciphertext. ​ When it's on the plaintext, the result can be malleable for certain encryption schemes. ​ Also, digital signatures are not encryptions; see this question. ​ ​ ​ ​
Feb
22
comment Secure entropy extractor for thermal noise collected from camera input?
It could be that one time, you have access to a much better source. ​ (I also now realize that the seed just needs to have enough min-entropy, rather than necessarily being nearly-uniform.) ​ This paper is the best I've found for camera inputs. ​ ​ ​ ​
Feb
22
comment Is authenticated encryption unnecessary if the message is digitally signed?
Do you still want confidentiality? ​ ​
Feb
22
comment Misuse-resistant authenticated encryption based on SHA-3/Blake2b and AES-CTR/ChaCha20
@ everyone else : ​ Note that my original answer did work when I posted it. ​ ​ ​ ​
Feb
22
revised Misuse-resistant authenticated encryption based on SHA-3/Blake2b and AES-CTR/ChaCha20
changed answer to be for current question
Feb
21
revised Explanation of protocol secure under random oracle but insecure with any hash fuction
fixed typo
Feb
21
comment Secure entropy extractor for thermal noise collected from camera input?
@otus : ​ ​ ​ Huh. ​ Good point. ​ ​ ​ ​ ​ ​ ​ ​
Feb
21
comment Secure entropy extractor for thermal noise collected from camera input?
@otus : ​ There's not publicly known proof that their outputs are uniformly distributed for long uniformly distributed inputs. ​ ​ ​ ​
Feb
21
comment Secure entropy extractor for thermal noise collected from camera input?
($\hspace{.03 in}$just checking) ​ Can you provide a seed? ​ ​ ​ ​
Feb
21
comment Explanation of protocol secure under random oracle but insecure with any hash fuction
I suppose it's my attempt at putting two sentences inside another sentence. ​ ​
Feb
21
revised Explanation of protocol secure under random oracle but insecure with any hash fuction
replaced "it" with what it was referring to
Feb
21
answered Misuse-resistant authenticated encryption based on SHA-3/Blake2b and AES-CTR/ChaCha20
Feb
21
revised Misuse-resistant authenticated encryption based on SHA-3/Blake2b and AES-CTR/ChaCha20
referred to functions instead of their values at a given input
Feb
21
revised Misuse-resistant authenticated encryption based on SHA-3/Blake2b and AES-CTR/ChaCha20
referred to functions instead of their values at a given input
Feb
21
comment Misuse-resistant authenticated encryption based on SHA-3/Blake2b and AES-CTR/ChaCha20
What endianness are your $len$s? ​ ​
Feb
21
answered Explanation of protocol secure under random oracle but insecure with any hash fuction
Feb
21
comment Example of a PRP that is not a strong PRP
It seems like your definition of (strong) PRP is not equivalent to the usual one, since for that, they need to be jointly indistinguishable from [a random permutation and its inverse], rather than just each indistinguishable from a random permutation. ​ ​
Feb
19
comment Why does the FBI ask Apple for help to decrypt an iPhone?
@aroth : ​ Presumably the flash chips are "what's preventing the FBI from" "creating a bitwise copy of them". ​ ​ ​ ​