4,005 reputation
1621
bio website
location United States
age
visits member for 3 years, 5 months
seen 32 mins ago

1d
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
His salt is far from "entirely pointless". $\:$ Salts can be used to defend against time-memory tradeoffs. $\hspace{.2 in}$ How could Eve "decrypt everything afterwards"? $\;\;\;\;$
1d
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
"will be" $\: \mapsto \:$ "will not be" $\;\;\;$ ? $\;\;\;\;\;\;\;\;$
Mar
28
comment Stacked LFSR - why not used?
The alternating step generator is close-enough that I doubt there's a name for your generalization. $\hspace{.59 in}$
Mar
28
comment Attack probability of an algorithm?
... where "the attack probability of the algorithm" is defined as ... $\;$
Mar
28
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
(Note that your most recent edit does not fix the problem.) $\;$
Mar
28
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
That still does not work with the standard meaning of "know". $\;\;\;$ With any standard meaning of "know", Mallory could know $\: A_{\hspace{-0.02 in}1}\hspace{.03 in}||\hspace{.04 in}A_2 \:$ without knowing $A_{\hspace{-0.02 in}1}$ and without knowing $A_2$. $\;\;\;\;\;\;\;\;$
Mar
27
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
... In that case, you should mention that you're using a non-standard definition of "know". $\;$
Mar
27
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
You should put that into your opening post. $\;$
Mar
27
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
That wouldn't "qualify it as 'secure'". $\:$ Similarly, my "argument could also be used to say public" key encryption is "insecure, because it allows you to check your guesses for the private key." $\:$ (Both of those sayings would hopefully be incorrect, since it's supposed to be infeasible to guess the private key.) $\hspace{.33 in}$
Mar
27
comment Is this a valid scheme to authenticate through a 'human-readable' certificate?
No, since that would let Mallory check her guesses for the concatenations of the answers. $\hspace{1.03 in}$
Mar
26
comment Encode-decode with different block sizes?
What programming language are you using? $\;$
Mar
25
comment Cycles in SHA256
The identity function is a permutation for which one would get $\: n = 1 \;$. $\;\;\;\;$
Mar
21
comment Is this an example of a zero knowlege proof?
What do you think would be a simulator for the adversary that $\hspace{2.49 in}$ generates messages just like an honest verifier? $\;$
Mar
21
comment Is it safe to prefix the a key with a known value?
It looks like HMAC can even use any bit-string as a key. $\;$
Mar
20
comment HMAC tag to verify the key (verification in the reverse direction)
Universal hash families provably achieve your goal. $\;$
Mar
18
comment Applying Trapdoor Function directly to plaintext
@Nova : $\;\;\;$ My "attack also works with a hashed input", however, I don't see why that makes the scheme mentioned in hvuong91's comment at 04:45:27Z insecure. $\:$ (Is "his/her mentioned scheme" different from that one?) $\;\;\;\;\;\;\;\;$
Mar
18
comment Applying Trapdoor Function directly to plaintext
@Nova : $\;\;\;$ Perhaps, but in any case, I hadn't noticed that comment. $\:$ "Why does" what "become insecure if we don't do that"? $\;\;\;\;\;\;\;\;$
Mar
18
comment Applying Trapdoor Function directly to plaintext
@Nova : $\:$ No, hvuong91 didn't say that hashing was the alternative. $\;\;\;\;$
Mar
18
comment Applying Trapdoor Function directly to plaintext
@Nova : $\:$ The eavesdropper would first hash candidate before using the trapdoor function. $\hspace{.69 in}$
Mar
18
comment Applying Trapdoor Function directly to plaintext
I just did that. $\;$