123 reputation
3
bio website
location
age
visits member for 1 year, 8 months
seen Jul 9 at 17:38

Jul
9
comment How to store salt?
What is the reason to always add the salt again when re-hashing the password?
Mar
27
awarded  Student
Mar
27
awarded  Scholar
Mar
27
accepted ECDH and Forward Secrecy
Mar
26
asked ECDH and Forward Secrecy
Dec
8
comment Unidentified public network sending traffic through my computer
Just to get this clear: You reinstalled your OS and formatted the whole drive and you still have this problem? Did you try, since you reinstalled anyway, installing Linux? :p
Dec
6
comment Secure Encrypted Chat Protocol
So the answer is pretty much: It's impossible, that is, there is no known method. (Without cheesy things like waiting a constant amount of time.)
Dec
5
comment Secure Encrypted Chat Protocol
Please include in your answer why the server is now prevented to do a man-in-the-middle-attack. :)
Dec
5
awarded  Supporter
Dec
5
comment Do any security experts recommend bcrypt for password storage?
No word about scrypt? :)
Dec
5
asked Secure Encrypted Chat Protocol
Dec
4
comment Recommended # of iterations when using PKBDF2-SHA256?
Just an idea: Could one do like ~20k rounds on the client PC and than 1k on the server? If an attacker would start by guessing "normal passwords", he would still have to do 21k rounds. And if he'd start with keys, he'd only need to do 1k rounds, but the entropy should be much higher. Am I missing something? Seems like a good solution to me.