414 reputation
28
bio website
location Netherlands
age 40
visits member for 3 years, 6 months
seen 5 hours ago

Java and security expert with over 10 years of experience with the language and with the practical application of cryptographic protocols - including the design of protocols within international standardization bodies. Creator of a heavily used common criteria certified product. Over 30 years of experience with computers. Likes kids, cats, reading, movies and several sports.


Nov
2
comment What are the risks associated with SSH'in from corporate LAN to untrusted server on the Internet
And I guess you should be aware of the privileges of the user setting up the connection. On the DMZ it is less likely to be an entity that has an higher amount of privileges.
Nov
2
answered What are the risks associated with SSH'in from corporate LAN to untrusted server on the Internet
Nov
2
awarded  Yearling
Oct
29
comment Why is not safe to use the same public key in RSA?
De nada, Juan :)
Oct
29
answered Why is not safe to use the same public key in RSA?
Oct
27
comment encryption using two keys
Just separately would work fine. Then store the results together with the encrypted data.
Oct
26
comment encryption using two keys
This question appears to be off-topic because it is about security without programming.
Oct
26
comment encryption using two keys
Oops, answered this before seeing it is off topic here. I should stop switching between crypto, security and SO all the time :)
Oct
26
answered encryption using two keys
Oct
20
comment Is it possible to turn a computer into a bomb?
Well, when I burned my AMD Athlon CPU to the ground when I switched on the computer without the fan attached, all I got was a whisp of smoke :(. That were the days that CPU's did not have thermal sensors, of course. I would not even call it a smoke bomb. The best bet is the battery or the hard disk drive. Or plugging in your computer in a 230 V outlet while it's expecting 110 :) That 21" monitor back in the days did go BOOM when it was accidentally put on 360, I can tell you. But not family shattering.
Oct
20
comment Can the aproximated date on which a given Encryption Algorithm will become prone to brute force be predicted?
There are these calculations where the amount of energy required to brute force an algorithm is larger than the amount of raw energy in the solar system. In those cases Moore's law can do nothing but to roll over and admit defeat. See for instance this article just to give an understanding on how mind boggling the numbers are.
Oct
19
comment Security Implications of using Base64 Encoding with Encryption
Updated my answer accordingly.
Oct
19
revised Security Implications of using Base64 Encoding with Encryption
added 638 characters in body
Oct
19
comment Security Implications of using Base64 Encoding with Encryption
What kind of strings does the library expect?
Oct
19
answered Security Implications of using Base64 Encoding with Encryption
Oct
18
revised Is it safe to use private key encryption for lots of small blocks of data themselves?
added 31 characters in body
Oct
18
comment Is it safe to use private key encryption for lots of small blocks of data themselves?
This question is more on topic here than on SO, but I'm still wondering if it should be on crypto (beta) or here.
Oct
18
answered Is it safe to use private key encryption for lots of small blocks of data themselves?
Oct
11
comment Do passphrases need to be run through PBKDF2? Almost impossible to brute force?
As you can see, I'm struggling a bit because the use case and the security of the password storage was not specified in the question. Usually a PBKDF2 is beneficial, but there are use cases where it is not required. A PIN is usually not run through a PBKDF2 either.
Oct
11
answered Do passphrases need to be run through PBKDF2? Almost impossible to brute force?