118 reputation
4
bio website schlamar.org
location
age
visits member for 1 year, 10 months
seen Apr 8 at 16:12

Jan
7
comment How to use RC4 securely
Well, ECRYPT itself doesn't recommend eSTREAM in its annual report
Jun
21
comment Why would you do a password audit
Though it is a bad idea, there is always the suggestion to increase complexity. See why this is wrong: xkcd.com/936
Jun
21
comment Why would you do a password audit
Well, I would guess these are password hashes...
Jun
20
comment How to use RC4 securely
I included my key generation part using a hash. The nonce is a different, incremental value for each message. Is this fine?
Jun
20
comment How to use RC4 securely
@JoachimStrömbergson Well, that was just an extract, so that's the reason for missing documentation and test. I added my test with vectors from RFC 6229 as further reference/help for other developers.
Jun
20
comment How to use RC4 securely
Maybe you want to review my version (question updated).
Jun
19
comment How to use RC4 securely
Ok, thanks for the links. My implementation is pretty much the same but the test vectors are very useful and the advice to drop the first 1536 bytes is new, too.
Jun
19
comment How to use RC4 securely
No, not on older Python versions. From Python 2.6 on there is SSL built-in, but I have to support Python 2.3.
Jun
19
comment How to use RC4 securely
@CodeInChaos read the question carefully: "because I cannot compile for my target system"