1,445 reputation
519
bio website klevjers.com
location Oslo, Norway
age 25
visits member for 2 years, 1 month
seen 6 hours ago

Specializing in computer security, programming and networks.

Huge fan of RFCs.


Nov
19
comment Storing AES password for verification
Yikes. I've edited my answer.
Nov
19
revised Storing AES password for verification
deleted 33 characters in body
Nov
18
comment Storing AES password for verification
No no, 2^123.4 is a good number! Of course, if you want your system to be "theoretically good", you wouldn't want to use MD5, but one with a better reputation (SHA-2/3). That said, I don't really see why you need the hash. You could just try decrypting the data. If it fails, the password's obviously wrong?
Nov
18
answered Storing AES password for verification
Nov
7
comment start point into cryptography and encryption
I have not read it, sorry. For a beginner it might be more motivating to "go easy first", especially if you are not too comfortable with the mathematics. Some books seem to throw the reader directly into maths, while others (like the one I recommended) provide a basic introduction to subsitutions and permutations, historic ciphers, etc. which at least for me was a comfortable introduction. You could always try the Cryptography chat room: chat.stackexchange.com/rooms/784/cryptography
Nov
7
comment start point into cryptography and encryption
I enjoyed this book as a beginner: amazon.com/…
Oct
14
comment Same-origin policy for file: URLs in Android browser?
You're right. Sorry about that. I think I tried to be of some sort of help that turned out not to be that valuable ;).
Oct
10
awarded  Yearling
Sep
30
awarded  Explainer
Jul
1
comment Is it safe to store public key encrypted password in the Mobile Device for authentication purposes?
If an attacker can get to the encrypted password and send it to the server without knowing the password, it won't help much. It's still a static shared secret.
Jun
27
awarded  Popular Question
Oct
10
awarded  Yearling
Oct
2
revised How does time-limited trial software work?
Just some language laundry. Pedantic me.
Oct
2
revised Communicate between two sites both with SSL
I think we're moving closer to authentication as a topic here. Really want to remove the SSL part also.
Oct
2
suggested suggested edit on How does time-limited trial software work?
Oct
2
suggested suggested edit on Communicate between two sites both with SSL
Oct
2
comment Communicate between two sites both with SSL
While navigating site A, how do you tell the site who's logged in? Are you using a session ID, this could probably be passed to site B on each request as you would on site A, as long as authentication is synchronously established at both locations. More advanced, so-called Single Sign-On is a large topic: en.wikipedia.org/wiki/Single_sign-on
Jul
3
comment Besides IP addresses, how else could one be identified?
Have a look at Maltego for identifying and linking people with online entities. paterva.com/web6/products/maltego.php
Jun
5
revised Where is my password stored on Windows 7?
I am rather certain that this is correct for Windows 7.
Jun
5
suggested suggested edit on Where is my password stored on Windows 7?