Starred posts

forest

Aug 6, 2022 00:47

Apparently the NSA is going to refuse to approve hybrid systems, so we'll be stuck with either pre-quantum or post-quantum algorithms.

b degnan

Jul 29, 2022 11:52

Also, if I have a $10 t-shirt, I need $10.01 of cryptographic strength. It's not the standard cryptographic problem set. You can already see it's a t-shirt.

fgrieu

Aug 1, 2018 04:44

The above puzzle is now on Puzzling.SE.

4

Maarten Bodewes

Aug 29, 2019 13:41

Well handled that comment though guys. Seems most of the dark energy was taken out of it. And even Paul took part in that; give credit where it is due :)

3

Squeamish Ossifrage

Dec 3, 2020 14:15

Insisting on purity of the syntactic definitions, as you seem to be doing, is a great way to make sure that the literature from the ivory tower diverges from actual practice and fails to accurately model it. If you're deliberately trying to kneecap the literature so it doesn't accurately model real-world security, say so. Accurate models are important, e.g. here's a paper in the literature about what can go wrong if you don't pay attention to the leakage: eprint.iacr.org/2019/624

2

fgrieu

Nov 29, 2020 15:24

@0x2b3bfa0 Perhaps you should tell @cisnjxqu who loves ASCII art!

2

Yehuda Lindell

Nov 18, 2020 08:53

@Hristmar (continued) With basic discrete math and probability, basic combinatorics, and basic number theory, you'll be fine. I don't have anything beyond that, and although I'm far from the strongest mathematically, I am able to contribute to the research community. Best of luck!

2

kelalaka

Jun 14, 2022 18:09

2

A: Required vote count for closure has been lowered to 3

We've implemented this change - Crypto SE now takes 3 close and reopen votes, instead of 5. This isn't a super complicated change but there's a bit of reasoning that might be good to share... and, I gotta say, especially on Crypto, I'm very hopeful this change will have a positive impact. Y'all ...

kelalaka

Jun 14, 2022 18:09

We have 3 votes to close!

SEJPM

Jul 1, 2019 12:04

@Patriot well, we have Katz-Lindell's Introduction to modern Cryptography (probabyly too academic), Aumasson's Serious Cryptography and Wong's Real World Cryptography (soon)

3

SEJPM

Feb 23, 2017 13:26

It's time to panic, a SHA-1 collision has been published!

5

SEJPM

Jun 12, 2019 20:06

If you want to discuss politics / IC / military interactions, please use Cryptography Politics.

3

SEJPM

Oct 17, 2020 18:21

@kelalaka FYI: If you write [so] in a comment or here in chat it will auto-expand to Stack Overflow. Similar rules apply for [<site-name-in-url.se>], e.g. Mathematics.

2

Squeamish Ossifrage

Oct 13, 2020 15:13

Effectively, the impact of asking this question is likely to be that it will become an HNQ with insufferable pontification about entropy by people who aren't competent in the field, and depress confidence in the wrong place, leading to bullshit in applications like gpg's advice to please bang on the keyboard like a monkey to make yourself feel better about cryptography.

2

Ilmari Karonen

Apr 27, 2019 14:29

@SqueamishOssifrage Arguably no, at least not if one was quoting a historical source that used the term. And I do have sympathy for your attempt to redefine it to get rid of those "magic" connotations, but I fear you're both swimming against the current and introducing terminological confusion by doing so.

3

Maeher

Apr 17, 2019 06:27

I don't know. I mean Paul's answers are mostly nonsensical. ("Just see how you feel about the squigglyness.") This one's just plain wrong.

3

fgrieu

Apr 30, 2022 20:07

Spent the better part fo the day studying a recent paper proposing a new conjectured exact primality test, combining a pseudoprime test to base 2 and an Elliptic Curve test. See my report. TLDR: I'm unconvinced.

Lery

Apr 25, 2022 12:15

I don't know what happened around that SHA-1 collision thing to get so many people to visit it, but I'm sure sad that it's this mostly down-to-earth answer that got the most votes out of all of my previous answers T.T I mean, please, my Garbled Circuit one took certainly ten times more time to write.

Ella Rose

Mar 31, 2019 01:40

...cryppies?

3

nobody

Apr 19, 2022 15:13

@bdegnan Hey, let me know when that happens. I'd love to see forest giving someone an attitude check :)

Gilles

Mar 20, 2019 14:23

sigh cryptography on Stack Overflow is such a cesspool

3

forest

Apr 18, 2022 00:24

aha! I found it: mailarchive.ietf.org/arch/msg/cfrg/UYBlYj41GqvW7_zZxHPSvPVNoAk

kelalaka

Apr 12, 2022 20:57

@forest congratulations

Maarten Bodewes

Apr 9, 2022 19:22

@forest Oh, forgot the answer to one of the questions: "Which of these are characteristics of block ciphers?" Correct answer: "Messages bigger than key size are broken up into size of key". I kid you not.

Maarten Bodewes

Apr 9, 2022 17:11

@forest No, he probably thinks it refers to Hillman.

b degnan

Feb 27, 2019 17:11

@EllaRose I named my peace lily NSA. I do have a "NSA plant" now.

3

forest

Apr 4, 2022 23:09

> Another possible explanation for why the NSA might have dropped P-256 is that
P-256 might succumb to classical Pollard-rho attacks (or small improvements thereof) in
the next few decades, whereas P-384 will be safe from such attacks far into the future.

Maarten Bodewes

Feb 3, 2019 00:28

My JS skills are deliberately kept low.

3

Ella Rose

Jan 25, 2019 19:09

Two instances of "signing is encrypting with the private key" today... sigh

3

kelalaka

Mar 21, 2022 14:39

William Stalling's book about network security.

fgrieu

Jun 27, 2020 17:35

On fast multiplication in crypto, there is this article.

2

SEJPM

Jun 23, 2020 20:07

@fgrieu congratulations!

2

SEJPM

Jun 20, 2020 21:30

so we already got more voters than during all previous elections!

2

SEJPM

Jan 4, 2019 19:15

nice, @EllaRose just migrated a Q 1min 28s after it was posted

3

Maarten Bodewes

Jan 1, 2019 17:34

Happy new year to you all, have a productive 2019 - after getting eating most of the excess food of course :)

3

Ella Rose

Dec 15, 2018 01:42

The "encrypt with the private key" mantra completely ignores that many public-key scheme do not offer any way to encrypt anything with either the public or private key

3

Maarten Bodewes

Dec 10, 2018 00:23

OK, everyone, started off with the nomination page. Don't forget to vote! Tomorrow I'll try and finish the questionnaire on my computer.

3

Maarten Bodewes

Dec 1, 2018 03:48

Heh, congrats to the bear: theregister.co.uk/2018/12/01/tls_broken_crypto

3

Ella Rose

May 15, 2016 23:43

That gratitude applies to many users on here, really.

5

SEJPM

Nov 26, 2018 21:51

@kelalaka please note that I merely posted sushi's tweet

3

Meta Crypto SE

Nov 26, 2018 20:44

1

Q: December 2018 Moderator Election Q&A - Question Collection

Cryptography is scheduled for an election next week, December 3rd. In connection with that, we will be holding a Q&A with the candidates. This will be an opportunity for members of the community to pose questions to the candidates on the topic of moderation. Participation is completely voluntary...

3

Future Security

Oct 27, 2018 21:57

Idea: Train a spam filter to recognize "Solve my", "Break my", "I found", and "My friend sent me" questions. Warn them that they may be breaking crypto se posting guidelines. Then disable question submissions from them until they solve a rot13 encoded message without being told what the algorithm is.

3

forest

Sep 27, 2018 01:56

@Q-Club What are you talking about? Are you a markov bot?

3

CodesInChaos

Feb 4, 2016 08:22

@mikeazo google restricted to "site:crypto.stackexchange.com"

5

Meta Crypto SE

Jan 9, 2022 01:38

0

Q: Worst Case And Average Case

I am a Ph.d Student I would like to understand deeply the worst case and average case complexity for my Ph.d purpose, any advices or title of books/lectures would be helpful and thanks in advance

discussion

fgrieu

Mar 6, 2020 07:15

New trend: @kelalaka introduces having a summary of linked articles popping up on mouse hoover. Nice touch from him, and whoever introduced that feature in the SE framework.

2

Squeamish Ossifrage

Jan 2, 2022 23:06

So if you as the defender thwart existential forgery, then you also thwart universal forgery.

Maarten Bodewes

Jan 2, 2022 14:44

Happy new year everybody!

fgrieu

Feb 28, 2020 11:06

Informal argument: the OAEP plaintext-to-padded-message-representative transform maps to an uniformly random element of a pseudo-random subset of [1,p-1] (with as many elements as there are possible PS values). Every element of [1,p-1], thus every element of this subset can be encrypted with ElGmal, so at least the scheme is sound (allows decryption).

2

fgrieu

Feb 28, 2020 10:57

@taritgoswami : the devil is in the details, including how you define ElGamal. Working modulo p and unrestricted plaintext in [1,p-1], ElGmal is not quite CPA-secure, because it leaks 1 bit of information about the plaintext. This too is fixed by OAEP, but needs to be taken into account in the argument.

2

The Side Channel

The Side Channel