|Nice Answer||Answer score of 10 or more. This badge can be awarded multiple times.|
Thomas Pornin earned this badge 225 times
jun 22 '12 at 12:32HMAC - Why not HMAC for password storage?
may 15 '12 at 16:13When using AES and CBC, can the IV be a hash of the plaintext?
may 9 '12 at 20:35Howto seed the PRNG in OpenSSL properly?
may 6 '12 at 8:27Which is the most vulnerable to MITM attacks, SSL or SSH?
mar 11 '12 at 11:05How many iterations of Rabin-Miller should be used to generate cryptographic safe primes?
feb 23 '12 at 12:23Encryption and the “security time decay” of prior encrypted data
feb 9 '12 at 0:35How hard is it to intercept SMS (two-factor authentication)?
jan 21 '12 at 20:53Do spaces in a passphrase really add any more security/entropy?
jan 19 '12 at 19:16Are there more modern password hashing methods than bcrypt and scrypt?
jan 16 '12 at 18:54How secure are self decrypting HTML files for data storage?
jan 13 '12 at 10:18What is a cryptographic oracle?
jan 10 '12 at 19:54Would using distinct IP addresses help support browsers with older SSL implementations?
jan 6 '12 at 18:15If an attacker is intercepting all of my traffic, will he be able to listen on my VPN session?
dec 29 '11 at 9:36Open Source vs Closed Source Systems
dec 29 '11 at 9:36Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?
dec 17 '11 at 3:49Hubs, Switches, and Bridges - Flaws and Security Superiority
nov 27 '11 at 15:36Which SSL/TLS ciphers can be considered secure?
nov 24 '11 at 12:51HTTPS Apache2 Information Leakage
nov 13 '11 at 15:13Am I protected from USB autorun malware on Windows 7?
oct 29 '11 at 10:36How far can we go in preventing videos from spreading out using P2P networks like BitTorrent?
oct 27 '11 at 23:13Why was the BEAST attack previously considered implausible?
oct 22 '11 at 12:11What is a good enough salt for a SaltedHash?
oct 19 '11 at 2:05Why do we even use passwords / passphrases next to biometrics?
oct 16 '11 at 9:26Why are hand-written signatures still so commonly used?
oct 14 '11 at 22:14When unlocking an encrypted drive, how does the unlocking program know it was successful?
oct 14 '11 at 11:13What are the risks of self signing a certificate for SSL
oct 13 '11 at 17:53Why AES is not used for secure hashing, instead of SHA-x?
oct 8 '11 at 20:38How does PGP differ from S/MIME?
oct 5 '11 at 15:20It is possible that brute force attempts are successful before the worst case, correct?
oct 4 '11 at 4:35Atypical DRM situation: distribute pictures to select partners, then prevent them from reusing them
sep 30 '11 at 23:35Asymmetric vs Symmetric Encryption
sep 29 '11 at 16:46Should I bother teaching buffer overflows any more?
sep 25 '11 at 0:19Cryptographic Security of Dynamically Generated, Non-Random Salts
sep 20 '11 at 16:22How much security is compromised if we accept other characters as login (other than the original password)?
sep 15 '11 at 9:30Online backup : how could encryption and de-duplication be compatible?
sep 10 '11 at 8:15Recommended # of iterations when using PKBDF2-SHA256?
sep 8 '11 at 18:14Randomizing MAC addresses on bootup
sep 8 '11 at 16:14How does Convergence (CA replacement) prevent its notaries from being MITM'd as well?
sep 8 '11 at 11:24Deleting a Java Object securely
sep 2 '11 at 19:53Using RFID-only on door lock to house?
aug 25 '11 at 14:19Do any security experts recommend bcrypt for password storage?
aug 16 '11 at 9:56How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
aug 14 '11 at 21:04License key / Serial number generator and checker
aug 12 '11 at 17:58Evaluating the entropy gathering in a PRNG
aug 12 '11 at 17:48Amount of simple operations that is safely out of reach for all humanity?
aug 11 '11 at 3:06Dictionary Attack on Wifi
aug 11 '11 at 1:21XKCD #936: Short complex password, or long dictionary passphrase?
aug 10 '11 at 22:41Is “real salt” the same as “initialization vectors”?
aug 9 '11 at 20:51“Real” Salt and “Fake” Salt
aug 8 '11 at 15:34How to achieve non-repudiation?
aug 5 '11 at 21:06Can RSA (or any public/private key algorithm) be repeated for large amounts of data?
aug 2 '11 at 17:22Native rsync protocol security
aug 1 '11 at 6:51Security Implications of setting passwd as suid
jul 27 '11 at 15:23Where can I learn cryptography/cryptanalysis the hard way, without going to school ? Any good book?
jul 25 '11 at 17:52What are the most common password salting methods?
jul 24 '11 at 16:31Why do people think that this is bad way to hash passwords?