146 reputation
7
bio website nowhere.com
location United States
age 94
visits member for 2 years
seen Nov 8 '12 at 5:17

An infinite number of mathematicians walk into a bar. The first one orders a beer. The second orders half a beer. The third, a quarter of a beer. The bartender says "You're all idiots", and pours two beers.


Sep
24
awarded  Autobiographer
Oct
22
comment How much added security do I really get with a longer key size?
I like the other answers and upvoted them, but this is the most helpful one.
Oct
22
accepted How much added security do I really get with a longer key size?
Oct
19
awarded  Critic
Oct
19
comment My credit union is reducing its maximum password length to 10 characters
@gerrit So you don't use services like PayPal?
Oct
19
awarded  Commentator
Oct
19
comment My credit union is reducing its maximum password length to 10 characters
One thing you can do is contact your credit union saying you've lost your password and need it back. If they send you back your actual password, this should set some alarm bells.
Oct
19
comment My credit union is reducing its maximum password length to 10 characters
What concerns me is, why would you want do make such a change? If the password is properly stored, 20 or 10 characters should not make a difference. The only practical reason I see for someone to do that is because they want to reduce the size of their password field in the database, which could indicate they are encrypted, or worse. Even then this seems like a stupid thing to do since storage is so cheap nowadays. Honestly, I have no idea why anyone would bring this up.
Oct
19
comment How much added security do I really get with a longer key size?
I see. When I asked the question, I had in mind that the KDF could generate 256-bit keys and truncate it to size.
Oct
19
comment How much added security do I really get with a longer key size?
It looks like sometimes the longer key lengths could fall first: schneier.com/blog/archives/2009/07/another_new_aes.html
Oct
19
comment How much added security do I really get with a longer key size?
How inevitable? DES is older than me and as far as I know there are no viable attacks on it.
Oct
19
comment How much added security do I really get with a longer key size?
Could you explain your last sentence?
Oct
19
revised How much added security do I really get with a longer key size?
added emphasis
Oct
19
comment How much added security do I really get with a longer key size?
I think you've missed the point of my question. I've edited it and added some emphasis on its key points.
Oct
19
asked How much added security do I really get with a longer key size?
Oct
17
awarded  Scholar
Oct
17
accepted Password checking in the context of symmetric encryption
Oct
17
comment Password checking in the context of symmetric encryption
It makes sense now. 7-zip compress files together to take advantage of possible similarities between files (something easily seen if you create multiple copies of a file and compress them all). I must have corrupted a part of the dictionary which was used by more than one file.
Oct
17
comment Password checking in the context of symmetric encryption
I see. I wonder why 7-zip reports corrupt data on all subsequent files if I corrupt the ciphertext corresponding to a single file (all of them being much larger than 16 bytes).
Oct
17
awarded  Student