Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
l33t2328
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
18 ms
·
181.
▲
by
l33t2328
5y ago
No, it is free for federal filing. 13.50 is for state filing.
182.
▲
by
l33t2328
5y ago
Isn’t there only one way? Walk through it looking for a repeat?
183.
▲
by
l33t2328
5y ago
> there is no meaningful sense in which OTP fails any of these IND-CPA/CCA1/CCA2 games That’s factually wrong. A CCA oracle can easily determine the key. > enc_k(m) is defined as taking the next length(m) unused bits from th
184.
▲
by
l33t2328
5y ago
It’s not illegal to say “I want to buy more shares at what I believe to be a generous price. If the board won’t sell me these shares, I don’t trust the judgement of the board and will subsequently sell my existing shares.”
185.
▲
by
l33t2328
5y ago
Insider information isn’t information that only exists in your mind.
186.
▲
by
l33t2328
5y ago
I’m not sure what point you were trying to make. I think you accidentally made the opposite point. Indeed your definition would imply that all modern ciphers are not Brazzy-secure. I’m not sure why this matters to you. No one is saying that
187.
▲
by
l33t2328
5y ago
And people consider that a bad offer a decade ago? I consider that a dream offer today.
188.
▲
by
l33t2328
5y ago
One way functions do not need to be reversible.
189.
▲
by
l33t2328
5y ago
You have some slight misunderstanding. AES does not need to be a one way function. It’s trivial to compute the preimage of a ciphertext. Just choose any key and decrypt it.
190.
▲
by
l33t2328
5y ago
It isn’t secure against the attack because the oracle uses the same key. The oracle is a tool used to formalize our definition. You’re right that the fact that OTP isn’t CCA secure doesn’t matter in practice because the key is only used for
191.
▲
by
l33t2328
5y ago
That’s not true at all. You can make an oracle for whatever you want. That’s why it’s an oracle.
192.
▲
by
l33t2328
5y ago
> The fundamental error l33t2328 is making lies in mistaking the part of the pad used to encrypt a particular plaintext with the entire "key" which must remain constant. This is no error. The distinction you are making is nonse
193.
▲
by
l33t2328
5y ago
Is there a point? Probably not. I’m just saying that as a matter of fact, OTP is not CCA secure. It may be secure under whatever alternative notions you’re proposing, but they’re not standard.
194.
▲
by
l33t2328
5y ago
It is not CCA secure because an adversary with access to a decryption oracle may get the key that was used to encrypt a challenge ciphertext via the method I’ve described. In the CCA experiment, the oracle uses the same key as the challenge
195.
▲
by
l33t2328
5y ago
I meant that it’s all pretty trivial business, focusing on the technicalities of what oracle is used in what security experiment. Although if you were previously unfamiliar with the definitions at play I apologize for calling an informative
196.
▲
by
l33t2328
5y ago
Any encryption scheme may have an oracle by definition of oracle. You’re (possibly intentionally) changing the situation by refusing to allow OTP to be an actual encryption scheme. Here is a blog post that summarizes some facts about Vernan
197.
▲
by
l33t2328
5y ago
This is not generally true. You can easily imagine a cryptosystem where having a decryption Oracle does not give the key. The fact that it is so easy to get the key given a decryption oracle for OTP just tells us that it’s really easy to sh
198.
▲
by
l33t2328
5y ago
It would still be a successful attack for the purposes of the definition of CCA secure. In the CCA experiment, an attacker is given access to a decryption oracle that has used the same key as the challenge message.
199.
▲
by
l33t2328
5y ago
You’re mistaken. CCA has a formal definition that may not match with your expectation, but in the definition of CCA, the same key that is used to encrypt the challenge message is used for the decryption oracle.
200.
▲
by
l33t2328
5y ago
It’s an oracle, we allow it to exist for the experiment.
201.
▲
by
l33t2328
5y ago
No, in the CCA experiment the Dec() oracle uses the same key.
202.
▲
by
l33t2328
5y ago
Recall that in the CCA experiment, the decryption oracle uses the same key as the message in your challenge ciphertext.
203.
▲
by
l33t2328
5y ago
It’s not even IND-CCA1 secure. You only need one access to the decryption oracle to determine the key before the challenge ciphertext. Just encrypt all 0 bits.
204.
▲
by
l33t2328
5y ago
It is vulnerable to chosen cipher text attacks. Give me a one time pad cipher text c of length n and a decryption oracle Dec(). Then the key k = Dec(0^n) and I can easily tell you that the message is c xor k.
205.
▲
by
l33t2328
5y ago
Hashing would be generally be fine. AES would still be totally okay.
206.
▲
by
l33t2328
5y ago
They could legally move there, but they would be shunned from the community, and indeed it may be hard for them to find someone willing to even sell them a house.
207.
▲
by
l33t2328
5y ago
> standing up a lobbying fund to lobby to Do The Right Thing about something. This would be a prime example - I would happily pay $100 to compete with Intuit's lobbying here. I'm also certain there are 31,999 other people in th
208.
▲
by
l33t2328
5y ago
The secretary of state for that state can provide that information.
209.
▲
by
l33t2328
5y ago
Those nuclear aircraft carriers have a bit more military protection than an arbitrary nuclear cargo ship will.
210.
▲
by
l33t2328
5y ago
> runs other programs This is a lot weaker of a statement than >processes in userland Even if you take a very broad definition of userland.
More ›