414 reputation
28
bio website
location Netherlands
age 40
visits member for 3 years, 6 months
seen yesterday

Security professional with many years of experience with the practical application of cryptographic algorithms and protocols. I'm helping with the design of protocols and API's within international standardization bodies. Lead developer of a common criteria certified product. Over 30 years of general experience with computers.

Currently looking for a new position in the Netherlands.


Dec
4
comment What is the difference between login throttling and temporary account lockout?
I'm going to remember that last sentence, interesting way of detecting attacks.
Dec
3
comment Soundness of GRC.com Haystack padding concept
You cannot keep it secret as Gibson just published the basics :) The choice & number of character does not add enough entropy.
Dec
3
comment Soundness of GRC.com Haystack padding concept
Yes, basically it is not secure if you allow an attacker to explicitly target your password scheme. And since schemes should be considered public knowledge, this method does not provide significant defence. But I don't have enough time right now to put that in mathematical notation.
Dec
3
comment Soundness of GRC.com Haystack padding concept
@pg1989 Gibson is a well known security researcher. That said, he's mostly well known because of his rather non-conforming (and sometimes rather far fetched or idiotic) ideas.
Dec
3
comment Soundness of GRC.com Haystack padding concept
The question looks OK now. That cannot be said about the padding idea of Gibson. But these two remarks are opinionated :)
Nov
2
comment What are the risks associated with SSH'in from corporate LAN to untrusted server on the Internet
And I guess you should be aware of the privileges of the user setting up the connection. On the DMZ it is less likely to be an entity that has an higher amount of privileges.
Nov
2
answered What are the risks associated with SSH'in from corporate LAN to untrusted server on the Internet
Nov
2
awarded  Yearling
Oct
29
comment Why is not safe to use the same public key in RSA?
De nada, Juan :)
Oct
29
answered Why is not safe to use the same public key in RSA?
Oct
27
comment encryption using two keys
Just separately would work fine. Then store the results together with the encrypted data.
Oct
26
comment encryption using two keys
This question appears to be off-topic because it is about security without programming.
Oct
26
comment encryption using two keys
Oops, answered this before seeing it is off topic here. I should stop switching between crypto, security and SO all the time :)
Oct
26
answered encryption using two keys
Oct
20
comment Is it possible to turn a computer into a bomb?
Well, when I burned my AMD Athlon CPU to the ground when I switched on the computer without the fan attached, all I got was a whisp of smoke :(. That were the days that CPU's did not have thermal sensors, of course. I would not even call it a smoke bomb. The best bet is the battery or the hard disk drive. Or plugging in your computer in a 230 V outlet while it's expecting 110 :) That 21" monitor back in the days did go BOOM when it was accidentally put on 360, I can tell you. But not family shattering.
Oct
20
comment Can the aproximated date on which a given Encryption Algorithm will become prone to brute force be predicted?
There are these calculations where the amount of energy required to brute force an algorithm is larger than the amount of raw energy in the solar system. In those cases Moore's law can do nothing but to roll over and admit defeat. See for instance this article just to give an understanding on how mind boggling the numbers are.
Oct
19
comment Security Implications of using Base64 Encoding with Encryption
Updated my answer accordingly.
Oct
19
revised Security Implications of using Base64 Encoding with Encryption
added 638 characters in body
Oct
19
comment Security Implications of using Base64 Encoding with Encryption
What kind of strings does the library expect?
Oct
19
answered Security Implications of using Base64 Encoding with Encryption