25,153 reputation
761121
bio website ayrx.me
location Singapore
age 19
visits member for 2 years, 6 months
seen 14 mins ago

This is not the profile you are looking for.


Dec
16
revised DTLS CertificateVerify doubt
edited tags
Dec
16
revised RSA 4096 key size difference - “sig” and “sig 3”
edited tags
Dec
15
awarded  Good Answer
Dec
15
reviewed Edit OpenTSA and PKCS11
Dec
15
revised OpenTSA and PKCS11
+some clarification
Dec
15
revised HMAC-SHA256 Transaction signing
deleted 12 characters in body
Dec
15
comment HMAC-SHA256 Transaction signing
I'm not sure what this is about. TOTP is simply HMAC applied over the current Unix ntimestamp and truncated to 8 digits. Sure, you can derive the HMAC key from the transaction details somehow but that isn't "signing". You need to describe in more detail what you have in mind.
Dec
13
comment Should the whole web *really* be encrypted? Isn't plaintext sometimes faster/better?
@DavidHoelzer " but the overall overhead at the server end is quite substantial." Commonly repeated myth but completely untrue. See: istlsfastyet.com
Dec
13
comment Necessary components for PGP
If we want to go as generic as possible, I'd say symmetric and asymmetric encryption.
Dec
13
answered What does this potentially malicious code do?
Dec
11
awarded  Guru
Dec
8
comment Timing attack against HMAC in authenticated encryption?
Excellent! I thought this was a Bear answer at first. :)
Dec
7
awarded  Nice Question
Dec
6
answered nginx recommended ssl_ciphers
Dec
1
awarded  Nice Answer
Nov
29
answered Techniques to make a login page safe without using SSL
Oct
16
awarded  Taxonomist
Oct
15
reviewed Reject What are the odds of an RSA private key collision?
Oct
15
awarded  Announcer
Oct
13
comment One-Time-Passwords resist against bruteforce attacks? Immune Alternative?
Your second point is false. There are algorithms that are information theoretic secure which means they remain secure even in the face of attackers with unlimited computing power.