772 reputation
2312
bio website
location
age
visits member for 1 year, 10 months
seen 1 hour ago

13h
comment Keepass Dictionary Attack Protection Strategy
From the Security page that you linked to, it sounds like it is all about increasing the time needed to try one key. Also, if the N and C is known, then I would guess that one could just precompile a list of list of keys. So if you want to attack several databases at the same time, you would only have to perform the hashing ones. In that sense the encryption with a random AES key works like a salt. But maybe someone with greater wisdom can say more.
1d
comment How does the NSA restrict public access to cryptography?
Thank you very much for this answer.
2d
comment How does the NSA restrict public access to cryptography?
@KnightOfNi: Yes, I am guessing that this is what Schneier meant.
Jun
29
comment Methods used to reverse a hash
Thanks for the answer. I forgot to mentioned that I think that the exhaustive search (brute-force) is much like the dictionary method.
Jun
25
comment Storing passwords on a home computer
Thanks for this answer. I hadn't thought of your first point. Simply storing the first couple of bytes seem to work.
Jun
25
comment Storing passwords on a home computer
Thanks for taking the time to write up this answer.
Jun
24
comment Storing passwords on a home computer
@Iszi: Would you write an answer? (I would like to hear how safe this method is. It sounds like you are saying that it is not safe at all).
Jun
24
comment Storing passwords on a home computer
@Iszi: It was just an example to illustrate what I was talking about. I guess one could run ones hashed passwords through reverse lookup and see if they are easily found.
Jun
24
comment Storing passwords on a home computer
Nope it is not :) I realize that it is easily found using the reverse lookup.
Jun
23
comment How long is a 2048-bit RSA key?
@user27296: You can only have a whole number of digits. So we need at least 616.5 digits. That means that 616 digits are not enough for representing the 2^2048 numbers. You need at least 617 digits. Note that with 617 digits, you can actually represent (write) 10^617 numbers (which is larger than 2^2048).
Jun
14
comment Online only encryption
What are some of the companies that you mention under point 2?
Jun
14
comment Online only encryption
@this.josh: Yes, I was just wondering about encrypting emails and such, but as mentioned, I don't need serious strong encryption.
Mar
30
comment Secret key is a prime number in GnuPG
This is great. I will take a look at it.
Mar
24
comment Zip file with two password
How did you write a program that checks the passwords?
Mar
18
comment How would one crack a weak but unknown encryption protocol?
Also: See here: old.honeynet.org/scans/scan16/som/som34.html
Mar
18
comment Hiding emails from Google
A downvote after the question is closed...
Mar
17
comment Hiding emails from Google
@FiascoLabs: Do you have an example?
Mar
17
comment Hiding emails from Google
@Ladadadada: I don't know, maybe if I don't get ads relating to the topic that I am trying to hide... I was just hoping for some expert answers on how (in general) to hide things from the automated scanners. I am not looking for an absolute guarantee.
Mar
17
comment Hiding emails from Google
The assumption in my questions is that I continue to use Gmail. As mentioned, I am not interested in strong encryption.
Mar
17
comment Hiding emails from Google
Thanks for this answer. I am only interested in hiding from the automated scripts (as I was trying to say in my question).