6,291 reputation
14
bio website vyznev.net
location Helsinki, Finland
age
visits member for 1 year, 9 months
seen May 12 at 7:29
stats profile views 4

I'm not really a cryptographer, I just play one on the internet.

Seriously, I'm just a programmer and mathematician interested in puzzles and information security. I don't have any kind of formal crypto training, but I've picked up a few things here and there over the years. Topics I'm particularly interested in include protocol design and analysis, classical ciphers and information-theoretically secure crypto techniques such as one time pads and secret sharing schemes.

Please consider any (original) code I post to Stack Overflow (and other Stack Exchange sites) to be released under CC-Zero unless stated otherwise. You may do whatever you want with it and don't have to credit me in any way, although of course that would be nice.


Jan
23
accepted Are legal issues surrounding cryptography on topic here?
Jan
23
accepted Tagging of questions about IND-CPA and IND-CCA security
Jan
23
comment Should we use SSL on our website?
While I agree with your suggestion in general, I'd like to note that the URI obfuscation point is probably mostly a red herring; HTTPS leaks the request and response lengths, which should make it fairly easy for an attacker to determine with reasonable accuracy which pages are being accessed. For an example of such attacks, see e.g. Chen et al. 2010, "Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow".
Nov
3
comment Tagging of questions about IND-CPA and IND-CCA security
Sounds pretty reasonable to me.
Nov
1
asked Tagging of questions about IND-CPA and IND-CCA security
Oct
15
asked Are legal issues surrounding cryptography on topic here?
Oct
15
awarded  Teacher
Oct
15
answered What is the proper use of the tag military-cryptography?
Oct
15
comment What is the proper use of the tag military-cryptography?
I've removed the tag (and the other random unrelated tags it was decorated with) from this question.
Aug
22
awarded  Yearling
May
27
comment Setting up the next chat event - call for topics!
@fgrieu: We're already getting some pretty good questions that remain unanswered, presumably because the intersection of "users who know the answer" and "users who are currently active" is empty. So I'd be in favor of more participation, even if it means lowering the level of questions a bit. We can always just close the questions that are actually bad, as opposed to merely easy. Easy is good, at least as long as we're also careful about spotting and closing duplicates.
Apr
30
comment Cryptography self-evaluation: how ARE you doing?
We are the first Google result for the title... and the second and the third. And the fourth is SO. Despite this being (a close variant of) an FAQ, none of the other first page Google results for this title look useful at all. So, yeah, I'd say we win this round.
Mar
29
awarded  Scholar
Mar
29
accepted Meta tags: [scope], [allowed-questions] and [closed-questions]
Mar
29
accepted Should we allow questions about amateur ciphers?
Dec
5
awarded  Student
Dec
4
comment Should we allow questions about amateur ciphers?
Thanks for the reply! Re: the chat meeting, if you mean poncho's comment, I wouldn't have read it as referring to quite the same type of questions as I was talking about above. (For one thing, unlike most sci.crypt cranks, the people asking the questions I mentioned appear at least approximately sane.) But I'd rather not try to put any more words in poncho's mouth; if it matters, we can always ask him(/her) directly to clarify what he meant.
Dec
3
asked Meta tags: [scope], [allowed-questions] and [closed-questions]
Dec
3
asked Should we allow questions about amateur ciphers?
Nov
23
awarded  Supporter