190 reputation
18
bio website neoatlantis.org
location China
age 23
visits member for 2 years, 4 months
seen Oct 5 at 15:30

Automatically-controlled Biological Engine

Input Ordinary Organic Food

Rated Power 500W ~ 1200W

Efficient < 40%

Operands Accepted zh_CN, en_US, en_HK, de_DE

Operands Recognizing Methods* Sonic, Optic, Mechanic, Chemic

Date of Production 1990-12-21 13:45 UTC

Rated Life** N/A

**This type of machine experimentally supports our Telepathy(TM) technology but not stable.*

***Varies depending upon usage. Refer to User Manual for recommended usage.*


Apr
16
awarded  Notable Question
Oct
20
awarded  Scholar
Oct
20
awarded  Supporter
Oct
20
accepted May I `store` the password, by making it the key in AES-256?
Oct
20
awarded  Popular Question
Oct
20
comment May I `store` the password, by making it the key in AES-256?
when you have picked(even the right) P and K and calculated E'=encrypt(k,p), you may not find E'==E because here should be using AES-256-CBC. But your idea looks right, just by decrypting E using your K and there will be P', possibly equals to P. So we're really talking about the space of user's password(which is not a really large one)?
Oct
20
comment May I `store` the password, by making it the key in AES-256?
You meant 'compare'. But in this scheme what you've get is my AES-output, and its plaintext. It is not enough like cracking a hash, just running and searching a key and hash it, because AES(I've use AES-CBC) produces different results even using same key and plaintext(there's random paddings there). You MUST use this key to DECRYPT given ciphertext to verify.
Oct
20
comment May I `store` the password, by making it the key in AES-256?
I have searched for this site and saw a plenty of such advices. Thanks, but I would have not wrote my own site if I don't want to try something new, because all other functions of other programs as a site is already there. And to this topic, the two Whirlpool here are only trying to improve the randomness. You may just use the plain user-inputed password and a randomized string as the key and the plaintext of AES. So, It is not just a compare. And running crackers is also pointless. Should a cracker be able to solve, so will AES be cracked.
Oct
20
asked May I `store` the password, by making it the key in AES-256?
Aug
20
comment Configure Firefox against malicious 302 redirect from a embedded image resource?
So only after an attack is detected can I block the attacker?
Aug
20
asked Configure Firefox against malicious 302 redirect from a embedded image resource?
Jul
8
awarded  Nice Question
Jul
8
comment Is there any security benefit of not using email services recently associated with PRISM?
@PetrPudlák the idea that reinventing the wheel of communication doesn't solve the problem. In my eyes however, utilizing existing service providers is convenient enough. To avoid NSA's monitor, either shut up talking about things really interest NSA in Internet, or use cryptography(with or without Internet), or try something like quantum communication(which is seemingly not completely impossible). When messages being transmitted very very important like a spy's report, use one-time-pad password at least.
Jul
8
awarded  Teacher
Jul
8
answered Is there any security benefit of not using email services recently associated with PRISM?
Jul
8
asked Can HTTPS server configured without a server certificate?
Jul
26
comment Can hash functions be used with CTR or OFB mode?
@Tie-fighter I have found an interesting encryption system: Snuffle. link. That's just my idea.
Jul
18
revised Can hash functions be used with CTR or OFB mode?
added 60 characters in body
Jul
18
awarded  Editor
Jul
18
comment Can hash functions be used with CTR or OFB mode?
I have included an example in my question. Hope this will make it clear. In CTR mode, I do not need to decrypt anything. To decrypt, one only need to regenerate the correct keystream(then bitwise XOR with the ciphertext).