7,262 reputation
11836
bio website github.com/CodesInChaos
location Frankfurt, Germany
age
visits member for 3 years, 9 months
seen 1 hour ago

22h
comment Choose your own exponents in RSA?
Large public exponents will slow down encryption and signature verification, and AFAIK some implementations are limited to 32 bit public exponents.
May
4
comment What makes Let's Encrypt secure?
Many existing CAs are already automated. They only check if you can receive emails to admin@example.com.
May
2
comment How many qubits are needed to factor 2048-bit RSA keys on a quantum computer?
crypto.stackexchange.com/questions/436/…
May
2
comment How many qubits are needed to factor 2048-bit RSA keys on a quantum computer?
Something around 4000 ideal qubits should be enough. In practice you'll need a lot for the error correction. Luckily the best real quantum computers (not dwave bullshit) still limited to 5 qubits or so.
May
1
awarded  Nice Answer
Apr
25
comment How secure is binding to localhost in order to prevent remote connections?
Project Zero - Finding and exploiting ntpd vulnerabilities wrote "Any IP packet arriving on an external interface and with the source IP 127.0.0.1 will be dropped immediately. But if we use IPv6 instead we can actually spoof ::1 and send control mode packets to the daemon (some Linux distributions have firewall rules in place that protect against this, e.g. Red Hat). Thus, if we are on the same local network, we can send spoofed packets to the link-local address of the target"
Apr
24
comment How secure is binding to localhost in order to prevent remote connections?
Apparently computers in the local network can spoof the IPv6 equivalent ::1 on some operating systems.
Apr
24
comment Custom socket server on the internet running as root
You could mmap only the required part of /dev/mem while running as root and then drop root privileges.
Apr
24
comment Does reboot clear RAM?
@ArekBulski tails.boum.org/contribute/design/memory_erasure
Apr
23
comment How to pick an encryption algorithm (cipher) and mode for PHP's mcrypt, for encrypting passwords?
See my answer to Strongest cryptographic algorithm available in PHP 5.3
Apr
22
comment How can I ensure my dll has not been modified?
Sounds like the usual impossible to solve DRM problem.
Apr
22
reviewed Approve What are the main differences between a Metasploit vulnerability/exploit attack and a “R.A.T.” attack?
Apr
21
revised Is it a ISO27001 requirement to record details of all instant messages?
deleted 22 characters in body
Apr
21
comment If I were to perform a MD5 hash every microsecond from 1-1-1970 how many hash colisions would I have
1Mhash/s is pretty slow for todays standards. A single good GPU is more than a thousand times faster than that (9 Ghash/s).
Apr
21
comment Decoding SHA-512 value
Rainbow tables use hash chaining to reduce the rate of growth below linear.
Apr
20
comment Decoding SHA-512 value
Where do they state that they're using a rainbow table? The description it sounds like they don't: "in our DB we store millions (soon billions) of words and different strings aside to their hash". Also the number of 250M records is pretty low for a rainbow table. I'd assume that they use a simple lookup table, not a rainbow table.
Apr
19
comment Sites being redirected to adult site in all devices
Perhaps your router has been infected. Perhaps it has been configured to use a malicious DNS server.
Apr
14
revised How practicable is application whitelisting
edited tags
Apr
14
comment RSA private/public keys
How did you end up with a partial private key? And what exactly do you mean by that? Part of the private exponent d? Or part of a "full" private key with d, p, q, dp etc.? The the latter case you might have received the full` value of p or q which would make factoring trivial.
Apr
14
comment RSA private/public keys
I believe that you can use lattice reduction method to attack RSA if you know part of the private key far more efficiently than brute-force. But I'm no expert in that kind of maths.