82,188 reputation
9114220
bio website
location
age 69
visits member for 3 years, 2 months
seen yesterday

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


17h
awarded  Good Answer
1d
revised Does the entire AES encrypted dataset have to be present to be 'cracked'?
added 25 characters in body
1d
comment Does the entire AES encrypted dataset have to be present to be 'cracked'?
If the PRNG output is in some way predictable by attackers, then the security properties achieved by the "splitting" are reduced, possibly lost completely -- at which point you still have an AES-encrypted string, which should resist until the end of times (unless the encryption key can be guessed, e.g. it was generated with the same flawed PRNG; or the library that uses AES to "encrypt a string" turns out to do something stupid, e.g. CBC with a fixed IV for all strings).
1d
awarded  Enlightened
1d
awarded  Nice Answer
1d
answered Does the entire AES encrypted dataset have to be present to be 'cracked'?
2d
comment Are there implementations of password hashing algorithms for major frameworks that utilizes specialized hardware like GPUs/FPGAs?
There are proposals that support heavy parallelism, and you can always turn a CPU-hard (not memory-hard) function parallel by defining h'(p,s) = h(p,s) XOR h(p,s+1) XOR h(p,s+2)... (p = password, s = salt). Whether this brings the defender on par with the attacker remains to be seen: it depends on whether the defender has GPU (e.g. on his server). There is also all the debate about buying vs running costs (e.g. GPU tend to use a lot of energy, and some people argue that in the long run, power consumption is what matters for the average attack cost).
Dec
17
awarded  tls
Dec
17
awarded  tls
Dec
17
awarded  tls
Dec
16
awarded  Announcer
Dec
15
comment SHA1 - S/MIME and CRL validity after deprecation?
The job of the TSA is to keep its clock accurate, in the same way as the job of a CA is to make sure that it does not issue a certificate to the wrong person. No cryptographic algorithm ever creates trust; it just moves it around.
Dec
11
answered SHA1 - S/MIME and CRL validity after deprecation?
Dec
9
awarded  Enlightened
Dec
9
awarded  Nice Answer
Dec
4
awarded  Nice Answer
Nov
28
answered Why does my openssl connection fail with elliptic curve cipher ECDH-RSA-AES128-SHA?
Nov
24
comment Use of safe prime in RSA digital signature scheme
Fixed. Thank you.
Nov
24
revised Use of safe prime in RSA digital signature scheme
added 1 character in body
Nov
24
answered Use of safe prime in RSA digital signature scheme