3,690 reputation
1521
bio website
location United States
age
visits member for 3 years
seen 43 mins ago

Aug
8
comment RSA, finding p,q
$e$ is not supposed to be secret. $\;$
Aug
7
revised How can I control the output of a hash function to output to specific data according to similarity?
improved title's grammar
Aug
5
comment Skein or Keccak stream cipher construction
In particular, even though one is "guaranteed by the MAC security property (existential forgery) that an adversary cannot generate any of the key stream on" its own, that does not necessarily give a secure stream cipher. $\;$
Aug
5
comment Interleaving bytes to make an effectively larger block size
"key digest" $\: \mapsto \:$ "part of the key" $\;\;\;$ ? $\;\;\;\;\;\;\;$
Aug
5
comment Skein or Keccak stream cipher construction
A MAC does not necessarily suffice. $\:$ One needs a PRF. $\;\;\;\;$
Aug
3
comment Constant data as input to hash
Is the "source data" the constant data or the non-constant data? $\;$
Aug
3
comment Is SRP post-quantum secure?
That is what it refers to. $\:$ For S/KEY, I think a commitment scheme that is one-to-one non-malleable, extractable, and equivocable would suffice, although the only candidates for that which I can think of use at least multi-string setup. $\:$ What is "a similar alternative based on Lamport's scheme"? $\;\;\;\;$
Aug
1
answered Is SRP post-quantum secure?
Aug
1
comment Theoretical attack on RSA
crypto.stackexchange.com/q/16036/991 $\;$
Aug
1
answered Is perfect-forward secrecy achieved with RSA?
Jul
31
comment Using Lattice-based cryptography for TLS\SSL
@otus : $\:$ Do you know of a generic proof that there isn't a classical algorithm to solve RSA? $\hspace{.88 in}$
Jul
31
comment Is this an acceptable All-or-Nothing Transform?
It's just confusing, since you use "$H$" for something quite different. $\:$ You could say "and a source of (pseudo)random bits". $\;\;\;\;$
Jul
31
comment Is this an acceptable All-or-Nothing Transform?
I don't see any reason to use $G$. $\;$
Jul
31
comment Is this an acceptable All-or-Nothing Transform?
In that case, should "Extract $b$ bits ... $G$" be replaced with "Generate a random block of $b$ bits"? $\hspace{.6 in}$
Jul
31
comment Is this an acceptable All-or-Nothing Transform?
"the resulting blocks $m_{1}$, $m_{2}$, $\ldots$, $m_{n}$" $\;$
Jul
31
revised Is this an acceptable All-or-Nothing Transform?
corrected a description error
Jul
31
reviewed Leave Open OTT service using FPE
Jul
31
comment Is this an acceptable All-or-Nothing Transform?
"from $G$" $\: \mapsto \:$ "from those blocks with $G$" $\;\;\;$ ? $\;\;\;\;\;\;\;$
Jul
31
reviewed Leave Open Known plaintext attack on ElGamal encryption
Jul
30
revised ECDH anonymous key exchange to avoid PKI
fixed security hole and simplified protocol