300 reputation
16
bio website
location Europe
age
visits member for 2 years, 6 months
seen Nov 6 at 6:59

Sep
6
comment If we can no longer trust NIST, what are viable alternatives?
ISO has a bad track record for crypto standards (see the severely broken ISO 9796-2 schemes).
Jun
10
awarded  Critic
Jun
6
awarded  Yearling
Feb
10
comment Encrypt+Signing data: PKCS#7 / CMS or do-it-your-own way?
If .NET does all the CMS plumbing for you, you are indeed shielded from CMS complexity and that may be the right solution. Good CMS libraries are not that common though. My point was more than you can encode into a binary blob your unencrypted and unsigned JSON structures (with any keys and any data you want in them), and only then encrypt the whole blob with GCM. When you load them from the dataase, you decrypt (and by virtue of GCM also authenticate) the blob which can then be decoded into JSON.
Feb
10
answered Encrypt+Signing data: PKCS#7 / CMS or do-it-your-own way?
Nov
27
answered Are there any hardware HSMs that can host/run custom applications using the HSM processor(s) within the hardened security boundary?
Nov
27
answered Do I need to keep the NTLM token in the HTTP Authorization header a secret?
Nov
18
awarded  Scholar
Nov
18
accepted Most efficient key algorithm for a TLS server key?
Nov
17
awarded  Student
Nov
17
comment Most efficient key algorithm for a TLS server key?
@CodeInChaos Clients will mainly be popular browsers. I think ECC is supported (IE8, Chrome, FF10).
Nov
17
asked Most efficient key algorithm for a TLS server key?
Nov
10
awarded  Editor
Nov
10
revised Android and AES side channel attacks
added 18 characters in body
Nov
10
answered Android and AES side channel attacks
Oct
5
answered What is SHA-3 and why did we change it?
Sep
11
comment TPM and storage of keys
How does this answer the question?
Aug
21
comment RSA encryption : How to create “.arm” certificate file for Public key?
@ashish-agarwal Could you post the code (small snippet) for creating the key, and the code that will use it. Besides that, does the command I provided succeed at converting the key? Can the result be used by the client software?
Aug
21
comment RSA encryption : How to create “.arm” certificate file for Public key?
@ashish-agarwal Which software did you use to create the key pair, and which software will clients use to read the .arm file?
Aug
21
answered RSA encryption : How to create “.arm” certificate file for Public key?