140 reputation
4
bio website mylifewithjava.blogspot.no
location
age
visits member for 1 year, 2 months
seen Apr 8 at 18:43

Apr
8
answered Should every SAML identity provider provide a unique public certificate to the service provider?
Apr
3
accepted SAML for transporting authorization information
Apr
3
comment SAML for transporting authorization information
We control both system. We will not have any fin grained access controll for the communication between the systems. What we want is to give the authenticating system the user and its assosiated roles on singing. The authenticating system will handle access managemeng internaly based on this. Sounds like SAML without XACML is a good fit
Apr
3
asked SAML for transporting authorization information
Dec
15
asked Application security architecture framework
Nov
20
comment The need for created timestamp in tokens
It seems lik a non standard way of ensuring uniqueness. Do you think the point of the created date is for uniqueness? One could also just use the exiration timestamp
Nov
18
asked The need for created timestamp in tokens
Sep
19
answered In a SAML2 FSSO Web Browser profile (HTTP POST), should the IdP analyse the AuthnRequest before asking the user to authenticate?
Sep
13
awarded  Teacher
Sep
13
answered Do I have to validate Saml2 InResponseTo?
Feb
15
comment Slow down symetric encryption
It doesn't seem to have any support for AES
Feb
12
awarded  Supporter
Feb
7
comment Slow down symetric encryption
I would like to try out how bad my first solution was which just used 2 iterations. Any of you know a good tool to brute-force/guess the original password and decrypt the file? Typically, what would an attacker us to break this?
Feb
7
comment Slow down symetric encryption
Now I see, thank you
Feb
7
comment Slow down symetric encryption
This is assuming the derived key is saved until the decryption takes place, right?
Feb
7
comment Slow down symetric encryption
What is the reason not to slow down the encryption but the derivation?
Feb
7
awarded  Scholar
Feb
7
accepted Slow down symetric encryption
Feb
7
awarded  Student
Feb
7
asked Slow down symetric encryption