1,388 reputation
312
bio website mricon.com
location Montreal, Canada
age 38
visits member for 1 year, 7 months
seen 20 hours ago

Systems administrator at the Linux Foundation.


Jul
4
answered Selinux security context public_content_t for vsftpd
Jul
1
comment why gmail's phone verification code not encrypted
There is usually configurable rate-limiting for failed attempts on the server side. E.g. if you fail more than 3 times within 30 seconds, all further attempts will be ignored -- so the chance of a successful random guess is 1 in 33,333.
Jul
1
answered Why is filling up at the gas pump require a quick scan of the Credit/Debit card?
Jul
1
comment Public key encryption vs Digital signatures
You are still conflating a whole lot of concepts, but let me assure you that you always want to generate a hash. This is how digital signatures work -- a one-way hash of your entire message is computed (e.g. sha256) and then encrypted with your private key. Anyone who has your public key can then verify the message.
Jul
1
comment Public key encryption vs Digital signatures
No, that's not what digital certificates are. Digital certificates are just your public keys signed by a certification authority. My answer stands -- in public key cryptography encryption by itself cannot be used for non-repudiation.
Jul
1
comment Public key encryption vs Digital signatures
That's not actually a clarification, as digital certificates are USED to make digital signatures.
Jul
1
answered Public key encryption vs Digital signatures
Jul
1
comment Public key encryption vs Digital signatures
You're effectively asking what's faster -- a train or going by railroad.
Mar
31
awarded  Necromancer
Mar
31
answered Hardware-restricted root login
Mar
24
awarded  Scholar
Mar
24
accepted Does RNG play a role in PGP signing?
Mar
24
asked Does RNG play a role in PGP signing?
Feb
25
awarded  Informed
Feb
24
revised GPG key trust after a signing party
deleted 2 characters in body
Feb
24
answered GPG key trust after a signing party
Jan
16
answered How to validate a client certificate
Jan
3
answered What kinds of encryption are _not_ breakable via Quantum Computers?
Jan
2
answered How to write a rock solid TOTP implementation?
Dec
23
comment Why does Google cripple the 2FA Google Authenticator PAM module?
It's not just HMAC/SHA-1, but a modulo 10^6 of the actual hash. The attack scenario for a HOTP token generating 6-digit codes is an attacker using previously known codes to arrive at the shared secret, which, considering this truncation, makes the attacker's job even more difficult due to increased chance of collisions.