meta user
network profile
| bio | website | |
|---|---|---|
| location | Oshkosh, WI | |
| age | 28 | |
| visits | member for | 2 years, 1 month |
| seen | Jun 15 at 8:32 | |
| stats | profile views | 28 |
Software developer.
|
Dec 12 |
comment |
Is there an asymmetric encryption algorithm that maintains the length of the plaintext? Is there a reason for the asymmetric requirement? can you use a symmetric stream cipher and store the key asymmetrically in another location? |
|
Dec 5 |
comment |
Given a large enough sampling of public keys could one begin to identify a private key? That is incorrect, if you can find a cert that uses RSA for it's PKI and they share either P or Q you can trivially do the math and find the missing component by factoring the numbers together. However this is only a problem if you did not have enough entropy while generating P and Q. See this Blog post for more info |
|
Dec 5 |
answered | Given a large enough sampling of public keys could one begin to identify a private key? |
|
Nov 26 |
comment |
Is Google spying on all of us? @tekiegreg you can, here is the link to it. In fact there is a OptOut tab on that page that lets you disable it entirely. |
|
Oct 31 |
comment |
How to login and encrypt data with the same password/key @sudopeople A static salt can be used in conjunction with a dynamic salt, but it is known as Pepper |
|
Oct 18 |
comment |
A String that if encrypted or decrypted with the same key gets an English word/statement in both cases One last change to not clutter the console, saves output to a sorted txt file. |
|
Oct 18 |
revised |
A String that if encrypted or decrypted with the same key gets an English word/statement in both cases added 606 characters in body |
|
Oct 18 |
comment |
A String that if encrypted or decrypted with the same key gets an English word/statement in both cases Actually I have a updated version. I updated my code. Call vigenere.JibberishKeys(); to get what you want. |
|
Oct 18 |
revised |
A String that if encrypted or decrypted with the same key gets an English word/statement in both cases added 4353 characters in body |
|
Oct 16 |
revised |
A String that if encrypted or decrypted with the same key gets an English word/statement in both cases Used a bigger wordlist and changed the code so it outputs in a semi sorted order based on S instead of K. |
|
Oct 16 |
answered | A String that if encrypted or decrypted with the same key gets an English word/statement in both cases |
|
Oct 15 |
revised |
A String that if encrypted or decrypted with the same key gets an English word/statement in both cases Added a link to the wikipedia page on the cipher as I had no clue what it was the first I read the question. |
|
Oct 15 |
suggested | suggested edit on A String that if encrypted or decrypted with the same key gets an English word/statement in both cases |
|
Oct 8 |
comment |
How does a code signing vender charge for creating certificate chains? It does not need to be Verisign, there are cheaper providers out there that may be available. |
|
Oct 8 |
answered | How does a code signing vender charge for creating certificate chains? |
|
Oct 3 |
comment |
is it possible to create a login “key” out of a USB drive? Yes it could check that, but then all the atacker needs to do is get the same model USB drive as you. I am 90% sure USB flash drives do not include a serial number on them, and if they do, it is possible (I don't know how likely) that a clone with dd may copy the serial number too. |
|
Oct 3 |
revised |
is it possible to create a login “key” out of a USB drive? added 483 characters in body |
|
Oct 3 |
answered | is it possible to create a login “key” out of a USB drive? |
|
Sep 15 |
comment |
Security Review - password_hash implementation for PHP @ircmaxell Most GUIDS and UUID's do not have very much entropy in them, a lot of the source bit-fields are fixed based on the machine that generated them and sequential a time stamps. See section 4.1 of the RFC for UUID |
|
Aug 6 |
comment |
What kind of certificate do I need to be able to sign my own subdomain certificates? You are correct, you would deploy *.example.com on all of the servers (when you import it to the certificate store make sure that the private key is not exportable so if the server is compromised the cert is safe) then on each server you can associate the full name with the website. (if you can not set the name in IIS the friendly name of the cert must start with a * or it greys out the box, also common bug, if you get a error about it requiring the cert to be marked as exportable you loaded in to the wrong store. Load it to the machine store, not the user store.) |
