Badge
| Nice Answer | Answer score of 10 or more. This badge can be awarded multiple times. |
Thomas Pornin earned this badge 225 times |
jun 22 '12 at 12:32
HMAC - Why not HMAC for password storage?
may 15 '12 at 16:13
When using AES and CBC, can the IV be a hash of the plaintext?
may 9 '12 at 20:35
Howto seed the PRNG in OpenSSL properly?
may 6 '12 at 8:27
Which is the most vulnerable to MITM attacks, SSL or SSH?
mar 11 '12 at 11:05
How many iterations of Rabin-Miller should be used to generate cryptographic safe primes?
feb 23 '12 at 12:23
Encryption and the “security time decay” of prior encrypted data
feb 9 '12 at 0:35
How hard is it to intercept SMS (two-factor authentication)?
jan 21 '12 at 20:53
Do spaces in a passphrase really add any more security/entropy?
jan 19 '12 at 19:16
Are there more modern password hashing methods than bcrypt and scrypt?
jan 16 '12 at 18:54
How secure are self decrypting HTML files for data storage?
jan 13 '12 at 10:18
What is a cryptographic oracle?
jan 10 '12 at 19:54
Would using distinct IP addresses help support browsers with older SSL implementations?
jan 6 '12 at 18:15
If an attacker is intercepting all of my traffic, will he be able to listen on my VPN session?
dec 29 '11 at 9:36
Open Source vs Closed Source Systems
dec 29 '11 at 9:36
Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?
dec 17 '11 at 3:49
Hubs, Switches, and Bridges - Flaws and Security Superiority
nov 27 '11 at 15:36
Which SSL/TLS ciphers can be considered secure?
nov 24 '11 at 12:51
HTTPS Apache2 Information Leakage
nov 13 '11 at 15:13
Am I protected from USB autorun malware on Windows 7?
oct 29 '11 at 10:36
How far can we go in preventing videos from spreading out using P2P networks like BitTorrent?
oct 27 '11 at 23:13
Why was the BEAST attack previously considered implausible?
oct 22 '11 at 12:11
What is a good enough salt for a SaltedHash?
oct 19 '11 at 2:05
Why do we even use passwords / passphrases next to biometrics?
oct 16 '11 at 9:26
Why are hand-written signatures still so commonly used?
oct 14 '11 at 22:14
When unlocking an encrypted drive, how does the unlocking program know it was successful?
oct 14 '11 at 11:13
What are the risks of self signing a certificate for SSL
oct 13 '11 at 17:53
Why AES is not used for secure hashing, instead of SHA-x?
oct 8 '11 at 20:38
How does PGP differ from S/MIME?
oct 5 '11 at 15:20
It is possible that brute force attempts are successful before the worst case, correct?
oct 4 '11 at 4:35
Atypical DRM situation: distribute pictures to select partners, then prevent them from reusing them
sep 30 '11 at 23:35
Asymmetric vs Symmetric Encryption
sep 29 '11 at 16:46
Should I bother teaching buffer overflows any more?
sep 25 '11 at 0:19
Cryptographic Security of Dynamically Generated, Non-Random Salts
sep 20 '11 at 16:22
How much security is compromised if we accept other characters as login (other than the original password)?
sep 15 '11 at 9:30
Online backup : how could encryption and de-duplication be compatible?
sep 10 '11 at 8:15
Recommended # of iterations when using PKBDF2-SHA256?
sep 8 '11 at 18:14
Randomizing MAC addresses on bootup
sep 8 '11 at 16:14
How does Convergence (CA replacement) prevent its notaries from being MITM'd as well?
sep 8 '11 at 11:24
Deleting a Java Object securely
sep 2 '11 at 19:53
Using RFID-only on door lock to house?
aug 25 '11 at 14:19
Do any security experts recommend bcrypt for password storage?
aug 16 '11 at 9:56
How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
aug 14 '11 at 21:04
License key / Serial number generator and checker
aug 12 '11 at 17:58
Evaluating the entropy gathering in a PRNG
aug 12 '11 at 17:48
Amount of simple operations that is safely out of reach for all humanity?
aug 11 '11 at 3:06
Dictionary Attack on Wifi
aug 11 '11 at 1:21
XKCD #936: Short complex password, or long dictionary passphrase?
aug 10 '11 at 22:41
Is “real salt” the same as “initialization vectors”?
aug 9 '11 at 20:51
“Real” Salt and “Fake” Salt
aug 8 '11 at 15:34
How to achieve non-repudiation?
aug 5 '11 at 21:06
Can RSA (or any public/private key algorithm) be repeated for large amounts of data?
aug 2 '11 at 17:22
Native rsync protocol security
aug 1 '11 at 6:51
Security Implications of setting passwd as suid
jul 27 '11 at 15:23
Where can I learn cryptography/cryptanalysis the hard way, without going to school ? Any good book?
jul 25 '11 at 17:52
What are the most common password salting methods?
jul 24 '11 at 16:31
Why do people think that this is bad way to hash passwords?
