208 reputation
16
bio website facebook.com/meplot
location
age
visits member for 2 years, 4 months
seen Oct 12 at 11:17

Sep
4
comment Preventing/Detecting forgery of logs generated in a potentially hostile environment
Honestly I think the first sentence says it all. If the machine isn't trusted it isn't trusted. Crypto is no fairy dust
Jul
23
awarded  Critic
Jul
7
awarded  Yearling
Jul
4
revised Data anonymization/ encryption requirement
added 236 characters in body
Jul
4
comment Data anonymization/ encryption requirement
The only way you could do that is by cracking the AES key, which is infeasible
Jul
3
answered Data anonymization/ encryption requirement
Jun
12
comment Avoiding Replay Attacks on Lightweight Channel
Because otherwise you cannot detect packets dropped by an attacker
May
29
revised How Safe Are Encrypted Websites Really?
My point was the connection should be HTTPS
May
27
comment How Safe Are Encrypted Websites Really?
It's as safe as your history ;-)
May
27
comment How Safe Are Encrypted Websites Really?
For EV certs: en.m.wikipedia.org/wiki/Extended_Validation_Certificate
May
27
comment How Safe Are Encrypted Websites Really?
You still need to check the domain, but if you got it from Google over https, it's probably fine
May
27
answered How Safe Are Encrypted Websites Really?
Apr
23
comment How can I create a password that says “SALT ME!” when hashed?
@KevinLi 64-bit would lower the barrier needed for second preimage considerably. Also, birthday paradox.
Apr
23
comment How can I create a password that says “SALT ME!” when hashed?
Now, 2^48 is far less than 2^64, and it is in fact bruteforceable (it would take ~4096 hours on Tom's machine)
Apr
23
comment How can I create a password that says “SALT ME!” when hashed?
Except he bruteforced 6 6-bit chars, 2^36, which is far less than even "SALTME" in 8-bit which would be 2^48
Apr
22
answered How can I create a password that says “SALT ME!” when hashed?
Mar
13
comment Is Salt, IV and Key necessary when encrypting password in a database using AES? If so, how should they be used?
Yeah, they're more tested. My point was that AES is using an hammer to cut a wire: won't work and you will get hurt
Mar
13
answered Is Salt, IV and Key necessary when encrypting password in a database using AES? If so, how should they be used?
Mar
13
answered Is it possible to recover securely deleted data from H.D.D using the forensics?
Mar
13
answered Avoiding Replay Attacks on Lightweight Channel