Reputation
59,185
Next tag badge:
593/400 score
74/80 answers
Badges
17 146 240
Newest
 Nice Answer
Impact
~2.4m people reached

May
18
comment Firebug reports SHA-1 certificate error
Ah - I worked it out. The certificate has a list of Subject Alternative Name records, including *.googleapis.com. For some reason Google chose to set the storage domain as the CN.
May
18
comment Firebug reports SHA-1 certificate error
All that said, I haven't quite worked out why a certificate with a common name of *.storage.googleapis.com is considered correct for the domain ajax.googleapis.com...
May
18
comment Disadvantages of disabling RC4 in SSL/TLS
Side note: when I say XP can "only" use RC4, that's a simplification, as it also supports DES, which is arguably better in some respects if you use it as part of 3DES. However, I don't recommend 3DES in TLS 1.0 (the only protocol it would make sense to add it to for compatibility) due to BEAST and the meet-in-the-middle attack against 3DES.
May
18
comment Disadvantages of disabling RC4 in SSL/TLS
I'm not sure that your advice holds in all situations - many very important web applications and web services are only used by legacy systems which do not support AES, but only DES and RC4. In such cases, disabling RC4 would prevent access from these devices. It's not all about how important the data is - there are also environmental factors.
May
18
comment What is encryption by RSA with AES?
@AlpA If you'd split it individually you'd have found that most of the questions you wanted to ask were already answered elsewhere, so you only needed to ask one or two specific ones to cover the more specific parts of your question.
May
18
comment What is encryption by RSA with AES?
Sorry, yes. 2^56 64-bit blocks. I'll fix it.
May
18
comment What is encryption by RSA with AES?
Also, for future reference, we usually request that you ask one question per post. You've stuck a lot of stuff into one place here, which is probably why someone downvoted. Take a look at our tour page and the help center for more information on how StackExchange works.
May
18
comment What is encryption by RSA with AES?
I think you have a typo - it's CBC, not CBS.
May
18
comment How do I prevent SSD file recovery?
@Sina As long as TRIM runs on the sector, you're fine. A potential failure case is if you get a power outage immediately after deleting something, before TRIM gets round to clear the affected sectors. Some drive firmwares have also been known to implement a faulty TRIM algorithm, but these are mostly documented and fixed. Check for firmware updates from your manufacturer.
May
17
comment Windows Passwords
The first step would not to be to bruteforce the SAM hashes - it'd be to pull the LSA stored secrets to find the plaintext cached passwords.
May
16
comment Is there a full disk encyption software that shows different content depending on what password has beeen used?
@Damon Also, you can just turn off the TPM and use BitLocker in passphrase mode, which means you (a) don't have to rely on the TPM, and (b) can use a passphrase of any number of 7-bit ASCII characters (I don't think there's a limit). My passphrase easily breaches 200 bits according to KeePass' estimation, and we have some automatic-entry ones at work that I guarantee are in excess of 500 bits.
May
16
comment Is there a full disk encyption software that shows different content depending on what password has beeen used?
@Damon The basic PIN in TPM mode is a numeric identifier, and you're right that its entropy is relatively low - 68 bits or so at best. In enhanced PIN mode with a TPM, you can use 20 7-bit ASCII characters, which is more like 132 bits of entropy. Keep in mind that the TPM actively rate-limits you so brute force against it should not be possible.
May
15
comment Is there a full disk encyption software that shows different content depending on what password has beeen used?
@Damon I would also point out that BitLocker has been reviewed by plenty of people in the security community. Just because there's no code available doesn't mean people aren't disassembling and looking at things. The full NT6.1 code is also available under shared license, which a fair number of organisations have access to.
May
15
comment Is there a full disk encyption software that shows different content depending on what password has beeen used?
@Damon "unknown, undocumented implementation" - BitLocker's crypto design is fully documented. Here's a starting point. Here's some more. You also don't need to use the TPM - mine's deactivated and I run BitLocker in passphrase mode - it's entirely optional to use the TPM. The "startup pin" is also not limited to 68-bit strength - I can't find any reference to this anywhere and would like to know where you found it.
May
15
comment Completely encrypting virtual machine (for free)
Why not just encrypt the host with BitLocker? Or DiskCryptor? Or FreeOTFE?
May
9
comment Bitlocker without TPM with both a startup USB and password?
The USB + PIN mode without a TPM was removed after Vista, iirc, because it was considered to not actually offer any additional security due to the implementation.
May
9
comment PKCS7 vs TLS 1.2 padding
@dave_thompson_085 Yes, this is true. However, check section E.2 at the bottom for information about how SSLv3 acts in SSLv2 compatibility mode - it notes that random padding must be used in that case. This indicates that SSLv3 is expected to potentially do something else for its padding in non-legacy mode - I think the idea was to leave it implementation specific or give rise to tying the padding to cipher suite specifications instead. Either way you're correct, hence why I said it's no detriment in TLS 1.2. It was not a good idea in 1.x or 3.0.
May
8
comment configuring burp to use in proxy environment
@ManojVarma No probs. Don't forget to mark as accepted.
May
8
comment How to make sure that the cryptographic hardware accelerator is being used in am335x?
You're probably better off asking the manufacturer. TI's support is pretty good.
May
8
comment PKCS7 vs TLS 1.2 padding
No. In the case of a message such that len(msg | MAC) % block_size == 0 an entire block of padding is added.