Reputation
980
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
5 13
Impact
~10k people reached

Aug
21
comment Why do I have to use multiple keys for each direction and purpose?
I sincerely mean you mean decryption and authentication.
Aug
21
revised Can EAP-TLS and AES256 encryption be used together?
added 210 characters in body
Aug
21
answered Can EAP-TLS and AES256 encryption be used together?
Aug
21
comment Why do we still use keys to start cars? why not passwords?
@gerrit The new one of Rabobank uses a camera to read those session-specific codes, hence the more advanced key pad. A security boon is that you get the entire transaction on the screen of the token (!). So though the physical security is slightly less, it seems better protected against online attacks. (no, not employed a bank yet, just a customer)
Aug
21
answered Significance of the difference between DSA and RSA in signature verifying speed
Aug
21
answered Are there any hardware HSMs that can host/run custom applications using the HSM processor(s) within the hardened security boundary?
Aug
20
comment Why do we still use keys to start cars? why not passwords?
It seems to me that that particular keypad would pretty quickly show wear and tear or stains, making at least 6 out of 10 keys useless. Our bank also uses a pad just for the PIN, but the keys are touch type only and of the type that doesn't show much. Even then, I wonder if I could not simply detect the build up of the oily substance that's on my fingers (or the french fries of course).
Aug
20
comment Secure way to shorten a hash
SHA-384 is almost the same as SHA-512 truncated; it also uses different constants inside. Also note that to remain compatible with most implementations you should use the leftmost bytes of the resulting hash.
Aug
16
awarded  Citizen Patrol
Aug
16
comment How to ensure message integrity for ciphers created via RSA algorithm
You've got a point there, although the choice of algorithm is probably of most importance.
Aug
16
comment How to ensure message integrity for ciphers created via RSA algorithm
I'm not agreeing with a migration to SO for this question. The exception is only to provide a sample result for GCM while the question is a non-programming question about RSA.
Aug
6
comment Enterprise message bus encryption
CMS could certainly be part of an answer. Just using CMS doesn't solve, for instance, the key distribution problems you face. Besides that, there are many ways of using CMS, so you need a specific form of CMS too.
Aug
6
answered Asymmetric encryption: Is it possible to share private key and hide public key?
Aug
5
comment What are requirements for HMAC secret key?
To be even more precise: you would use a random number generator for a completely new key. It is possible for instance to obtain a key from a Key Derivation Function, possibly using a key agreement protocol. As long as all the allowed keys for your specific size are equally possible to an attacker you're good.
Aug
4
comment Checksum Calculation for Source Code tar balls downloads
Of course: "we have always provided checksums" and "we don't trust CRC of TCP" may be reasons as well, if not particularly good ones.
Aug
4
revised Checksum Calculation for Source Code tar balls downloads
added 153 characters in body
Aug
4
revised Checksum Calculation for Source Code tar balls downloads
added 6 characters in body
Aug
4
answered Checksum Calculation for Source Code tar balls downloads
Aug
3
comment Enterprise message bus encryption
I hate to put something like "not that I know of" as an answer, but that's about all I could give you. You could of course reuse CMS or XML encryption/digital signature. Those are standardized container formats, but not specifically for message bus systems.
Jul
13
comment Security bounds of TLS client authentication (from browsers)
I've accepted this answer. Thanks for the edit that explains why the verification cannot succeed on another server because the signature is over all of the handshake messages. It would be even nicer if we could make that more formal, but this is the answer regardless of that.