216 reputation
312
bio website google.com
location Stack Overflow
age 30
visits member for 1 year, 5 months
seen Apr 10 at 15:36

I post stuff on stackoverflow and want a free profile badge for filling out this section :D


Mar
1
asked is this optional keyword redundant?
Jan
31
awarded  Popular Question
Dec
5
comment Authenticate user without knowing their password
So I guess you'd be sending the native app an encrypted copy of the private key and have the native app use some sort of password-based key-derivation scheme to decrypt it? Because if you're storing unencrypted private keys on the server then I just don't see the point..
Nov
10
awarded  Yearling
Oct
29
comment Is phpseclib a secure and reliable alternative to OpenSSL?
For that matter, OpenSSL has FIPS certification, which, as I understand it, can cost upwards of $100,000 USD. For some reason I don't imagine the phpseclib community is big enough to pony up that kind of cash.
Oct
29
comment Is phpseclib a secure and reliable alternative to OpenSSL?
I think phpseclib is a great solution but Thomas and tyleri are right - it's going to be hard to dethrone OpenSSL, which has a ton more scrutiny due to it's much greater level of popularity. Also, FWIW, phpseclib does use OpenSSL, if it's available, for RSA and biginteger operations. That would seem to suggest that even the phpseclib author thinks OpenSSL is better in a lot of cases.
Oct
27
comment Is generating an RSA key with password and then stripping it off more secure than no password at all?
Could be one extra source of entropy, I suppose, for the CSPRNG, depending on how the CSPRNG is implemented, but beyond that, I think it's BS too. And even the "extra source of entropy" thing is a bit of a stretch.
Oct
12
awarded  Notable Question
Jun
20
awarded  Popular Question
Apr
22
awarded  Suffrage
Apr
22
awarded  Vox Populi
Apr
22
awarded  Informed
Apr
20
awarded  Enthusiast
Mar
26
accepted generating RSA keys through the browser
Mar
25
asked generating RSA keys through the browser
Mar
24
awarded  Analytical
Jan
30
awarded  Teacher
Jan
29
comment What is the best way to generate keys in phpseclib?
First, when people talk about phpseclib they're probably talking about the "sourceforge" version. First ten sites on Google are for that version anyway. Second, the "sourceforge" version has been hosted on github since last year: github.com/phpseclib . Check out ohloh.net/p/phpseclib vs. ohloh.net/p/phpsec
Jan
29
answered What is the best way to generate keys in phpseclib?
Dec
26
comment Making a Windows cert say it's purpose is “Ensures the identity of a remote computer”
The bit about teh extendedKeyUsage helped. Here's the code to do it in phpseclib: $x509->setExtension('id-ce-extKeyUsage', array('id-kp-serverAuth'));