8,499 reputation
21355
bio website
location The Netherlands
age
visits member for 2 years, 11 months
seen yesterday

Student; manufactured 2 decades ago; interested in computer security and software engineering.


Jul
8
reviewed Reject XSS with input in onclick attribute
Jul
2
awarded  Curious
Jul
1
reviewed Approve Why do ATMs accept any PIN?
Jun
30
reviewed Approve opportunistic-encryption tag wiki
Jun
30
reviewed Approve opportunistic-encryption tag wiki excerpt
Jun
28
reviewed Approve How widely deployed is TLS with cipher ECDHE?
Jun
25
awarded  Yearling
Jun
17
reviewed Approve safe way to communicate IBAN connection
Jun
17
reviewed Approve format-string tag wiki excerpt
Jun
17
reviewed Approve buffer-overflow tag wiki
Jun
17
reviewed Approve format-string tag wiki
Jun
13
comment Is there any reason someone wouldn't use a longer key?
That text sounds pretty good to include in your answer ;) Afraid I can't give you a second upvote though :(
Jun
13
comment Expiring AES Key
Well if you can modify the file, you can also delete it or change the key it's encrypted with. That would work of course. Other than that... well I guess I'll let others answer, but I'm not aware of any such technique.
Jun
13
comment Is there any reason someone wouldn't use a longer key?
+1 for being the only one to mention elliptic curves. What I've always wondered though: is ECC also faster than RSA when using a key with roughly the same strength (e.g. 2048-bits RSA and 224-bits ECC)?
Jun
13
comment Is there any reason someone wouldn't use a longer key?
What about ECC? The question is about public-key cryptography, not necessarily only RSA. I know ECC has shorter keys for the same amount of entropy, but I've always wondered if en/decryption is also faster.
Jun
13
comment Expiring AES Key
Quite a big text, I read through it pretty quickly... I think what you want is impossible. If the encryption 57d478bae748f2 with key 6a47ce decrypts to "attack at dusk" today, it will still do so tomorrow.
Jun
13
reviewed Approve Can webpages using the Google plus button get my name?
Jun
13
awarded  Nice Answer
Jun
10
reviewed Approve Do actual penetration testers actually use tools like metasploit?
Jun
9
reviewed Approve How to protect against login CSRF?