Reputation
4,765
Next tag badge:
50/100 score
29/20 answers
Badges
1 6 21
Newest
 Yearling
Impact
~45k people reached

13h
comment Signature and hash function properties
"collision resistance implies preimage resistance" only in the sense that second-preimage resistance also implies preimage resistance. $\;$
1d
comment CPA-security of a pseudorandom permutation encryption scheme
You appear to be missing the "prove that this scheme is CPA-secure for ..." part. $\;$
2d
comment Show How to Efficiently Solve the Computational Diffie-Hellman Assumption given an Algorithm that Solves the Square-DH Problem
cross-posted from MSE after less than 2 minutes, and answered there $\;$
2d
comment Example: pre-image resistance to second pre-image resistance
crypto.stackexchange.com/q/183/991 $\;$
2d
comment Converting a pre-image resistant hash to second pre-image resistant
The only better description I can think of would be a summary of the abstract. $\;$
Jul
24
comment Why is Chrome saying that “TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)” is an obsolete cipher suite?
security.stackexchange.com/a/88653/49075 $\;$
Jul
24
comment Why is Chrome saying that “TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)” is an obsolete cipher suite?
I suspect that key exchange mechanism does not have forward secrecy. $\;$
Jul
23
comment What is k in RSA?
No, since the image should have an open-parenthesis just before the $k$. $\;$
Jul
23
comment What is k in RSA?
You go to the "Computation" section of the page I linked to. $\;$
Jul
22
comment Shuffleless PRNG function with non-repeating values?
There is a much cheaper and more efficient method; it just only does the $\hspace{1.76 in}$ currently-relevant parts of each shuffle. $\;$
Jul
22
comment Shuffleless PRNG function with non-repeating values?
"without shuffles/arrays" seems like a rather arbitrary requirement. $\;$
Jul
22
comment i cant understand the meaning and the difference between linearity equation and affine and non linearity?
The expression with $\oplus$s. $\;$
Jul
22
comment i cant understand the meaning and the difference between linearity equation and affine and non linearity?
That expression is affine even if $\: a_{\hspace{.02 in}0}\hspace{-0.03 in} = 0 \;$. $\;\;\;\;$
Jul
20
comment Implementing forward secrecy in OpenPGP with public key authentication
In other words, do you also require forward authenticity? $\;$
Jul
20
comment Implementing forward secrecy in OpenPGP with public key authentication
"forward secrecy" ... "sent from that user." $\:$ Do you actually mean forward security? $\:$ The situations for secrecy and authenticity are rather different. $\;\;\;\;$
Jul
19
comment Why don't use random padding in RSA?
Probably because we want to be more confident in 2. $\;$
Jul
19
comment Simulation based proofs: Simple examples
This was cross-posted to mathoverflow after less than 2 hours without mentioning that on either site. $\hspace{.42 in}$
Jul
18
comment 64bit nonce in AES-CTR, why not 128?
Your question is missing a description of what "IV"'d means. $\;$
Jul
18
comment Determine AES key given encrypted and unencrypted files
As far as is publicly known. $\;$
Jul
17
comment Is authenticated encryption basically a lockable box?
Right. $\:$ (I just expanded on that in my answer.) $\;\;\;\;$