meta user
network profile
| bio | website | goodenoughsecurity.blogspot.c… |
|---|---|---|
| location | Jerusalem, Israel | |
| age | 39 | |
| visits | member for | 9 months |
| seen | Mar 13 at 7:51 | |
| stats | profile views | 47 |
Digital security professional and manager. Work on chip hardware security (smart cards, USB tokens, consumer electronics), DRM, proprietary cryptography and protocols, embedded software security, end-to-end system security and security policy.
IT security (especially password security) is a hobby.
|
Sep 14 |
answered | Without SSL, what vantage point does one need to MITM non-SSL'd HTTP? |
|
Sep 12 |
comment |
Diffie-Hellman key-exchange: securing prime and base @barmaley Are you implementing authenticated or non-authenticated DH KE? If authenticated, how are you planning to authenticate? This is actually the trickier part of using DH and requires care. |
|
Sep 11 |
comment |
Estimating the size of a rainbow table Cool calculator. Note that rainbow tables are much trickier beasts compared to simple hash tables. For example, rainbow tables are probabilistic and can never ensure 100% coverage of the full key space (which is why the calculator contains a "total success rate" parameter). It's possible to increase the success rate for a given size table (by increasing the number of tables), but this increases the time it takes to search for a specific hash within the table. For details, read Oechslin's classic paper on rainbow tables (PDF). |
|
Sep 10 |
comment |
iPhone full disk encryption and theft protection? The Wired article is from 2009. iOs 4 is from 2010. I'm not aware of any such attacks on the iOs disk encryption. |
|
Sep 6 |
comment |
iPhone full disk encryption and theft protection? Could you reference the research about bypassing the iOS encryption on jail-broken devices? I don't understand how this is possible if (as Apple state) the disk encryption key is not stored on the device but is calculated as a function of the passcode. |
|
Sep 6 |
answered | How does KeePass master key derivation increase security? |
|
Sep 3 |
answered | Bypassing the BIOS password |
|
Aug 22 |
answered | Computing RSA 1024-bit Decryption Performance |
|
Aug 19 |
answered | Does having a minimum number of digits improve password security? |
|
Aug 15 |
awarded | Supporter |
|
Aug 14 |
awarded | Teacher |
|
Aug 14 |
answered | Can hash functions be used with CTR or OFB mode? |
