CTR mode and it's derivatives(like GCM) has an issue with key commitment. An attacker can convince a user to decrypt a given plaintext under multiple keys. For CTR mode, this is trivial since CTR mode provides no authentication at all. …
I'm working on a new product that will have mobile phone apps as some clients, but due to timeliness and usage patterns I want long term auth of some kind. A refresh once per quarter or so would be ideal. …
I am going to ask a rather stupid question for which I apologize in advance, but I'm sort of losing my head at this point. I am working on an encryption system where two parties are required to authenticate themselves …
Hello everyone. Some time ago I created efficient pseudo-random number generators based on Collatz-like functions: [https://www.reddit.com/r/RNG/comments/19a2q24/collatzweyl\_generators/](https://www.reddit.com/r/RNG/comments/19a2q24/collatzweyl_generators/) [https://arxiv.org/pdf/2312.17043](https://arxiv.org/pdf/2312.17043) One of the simplest of them is the Collatz-Weyl generator: static __uint128_t x, weyl, s; // s must be odd bool Collatz_Weyl(void){ if(x …
I'm a professional software engineer, and I've written software to manage user-generated keys for a bespoke system in the past. The general gist was vary the encoding of the key data itself while associating it with a human-readable label in …