3,196 reputation
222
bio website goodenoughsecurity.blogspot.c…
location Jerusalem, Israel
age 40
visits member for 1 year, 11 months
seen Mar 6 at 7:06

Digital security professional and manager. Work on chip hardware security (smart cards, USB tokens, consumer electronics), DRM, proprietary cryptography and protocols, embedded software security, end-to-end system security and security policy.

IT security (especially password security) is a hobby.


Sep
15
answered PGP Secret Key Values calculation
Sep
14
awarded  Editor
Sep
14
revised Without SSL, what vantage point does one need to MITM non-SSL'd HTTP?
added 158 characters in body
Sep
14
answered Without SSL, what vantage point does one need to MITM non-SSL'd HTTP?
Sep
12
comment Diffie-Hellman key-exchange: securing prime and base
@barmaley Are you implementing authenticated or non-authenticated DH KE? If authenticated, how are you planning to authenticate? This is actually the trickier part of using DH and requires care.
Sep
11
comment Estimating the size of a rainbow table
Cool calculator. Note that rainbow tables are much trickier beasts compared to simple hash tables. For example, rainbow tables are probabilistic and can never ensure 100% coverage of the full key space (which is why the calculator contains a "total success rate" parameter). It's possible to increase the success rate for a given size table (by increasing the number of tables), but this increases the time it takes to search for a specific hash within the table. For details, read Oechslin's classic paper on rainbow tables (PDF).
Sep
10
comment iPhone full disk encryption and theft protection?
The Wired article is from 2009. iOs 4 is from 2010. I'm not aware of any such attacks on the iOs disk encryption.
Sep
6
comment iPhone full disk encryption and theft protection?
Could you reference the research about bypassing the iOS encryption on jail-broken devices? I don't understand how this is possible if (as Apple state) the disk encryption key is not stored on the device but is calculated as a function of the passcode.
Sep
6
answered How does KeePass master key derivation increase security?
Sep
3
answered Bypassing the BIOS password
Aug
22
answered Computing RSA 1024-bit Decryption Performance
Aug
19
answered Does having a minimum number of digits improve password security?
Aug
15
awarded  Supporter
Aug
14
awarded  Teacher
Aug
14
answered Can hash functions be used with CTR or OFB mode?