Reputation
1,179
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 11 18
Newest
 Yearling
Impact
~38k people reached

Feb
28
awarded  Yearling
Dec
11
answered Using mutiple keys to encrypt the same text with the password as a key but someone changes their password
Nov
23
awarded  Good Question
Oct
19
comment Can we still provide confidentiality when cryptography is outlawed?
This could work for a few very narrow situations, such as securely storing medical records for a group of travelers including a medical doctor. In an emergency, the doctor could get access over an unencrypted link to the injured traveler's relevant information -- even though everyone knows that eavesdroppers will also be able to overhear that information -- without revealing any of the other traveler's information.
Sep
23
revised Is using the username encrypted with the password as key a good password storage scheme?
add relevant tags
Sep
23
suggested approved edit on Is using the username encrypted with the password as key a good password storage scheme?
Aug
23
answered Do I ultimately have to hold a key in my head?
Aug
11
comment Preventing Ethernet over power
I hear that 1:1 mains transformers, also called isolation transformers, are often used for medical devices that plug into mains power. It may be easier to find the kind of transformers travelers use to plug North American devices into 2:1 mains transformers plugged into European walls, and plug European devices into 1:2 mains transformers plugged into North American walls; plugging a 1:2 transformer into a 2:1 transformer creates a combined device that is effectively a net 1:1 transformer.
Aug
11
revised Practical steps for encrypting an encryption key for data stored in MySQL
fix oops pointed out by Luke.
Aug
11
comment Practical steps for encrypting an encryption key for data stored in MySQL
@LukeTaylor: You are right. I was mis-applying the advice from "A Lesson In Timing Attacks (or, Don’t use MessageDigest.isEquals)". That essay says comparing hashes is vulnerable to a timing attack, but I'm pretty sure you are right that it doesn't apply to bcrypt-hashed passwords.
Aug
8
answered Practical steps for encrypting an encryption key for data stored in MySQL
Aug
7
comment Advantages to alphanumeric-only usernames?
The answer to security.stackexchange.com/questions/10294/… seems to say that special characters are not necessary to make strong pass phrases. A seven word Diceware pass phrase is strong, even when it only uses the 26 lower case letters.
Aug
7
answered Sending Group Keys over network
Jul
9
comment How can it be easy to write but “impossible” to extract the private key from a crypto token?
@DRF: Huh? If it were possible to back up the private key, wouldn't that defeat the entire purpose of a hardware crypto module?
May
1
awarded  Famous Question
Feb
28
awarded  Yearling
Dec
21
comment Steganography to hide text within text
Related: "Any efficient text-based steganographic schemes?".
Oct
13
comment Is there a standard for printing a public key as a barcode?
related: "Putting my PGP ID/link on printed business cards".
Oct
13
comment Putting my PGP ID/link on printed business cards
related: "Is there a standard for printing a public key as a barcode?".
Sep
23
comment Asymmetric crypto: Decrypt own messages without having private key
I find that ssh-keygen works pretty good -- setting up ssh private keys -- for generating keypair and saving the encrypted keypair in a standard place.