75,653 reputation
798194
bio website
location
age 69
visits member for 3 years
seen 20 mins ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


15m
answered Why is TLS_FALLBACK_SCSV secure against a MITM attack?
6h
comment How long can a pkcs#8 passphrase be?
There is no hard limit in PKCS#8 about the number of iterations. However, some implementations may have arbitrary limitations, e.g. not having a command-line switch to configure the number of iterations. The real limit on the number of iterations is that iterations make the password-to-key transform expensive for everybody, attacker and defender alike; so you don't want to go to the billions range.
17h
answered How long can a pkcs#8 passphrase be?
2d
comment How negative are virtual machines (vms) to /dev/urandom?
In general, VM are fine because Linux distributions keep a random seed across reboots (it is part of what happens in the boot scripts) so as long as enough entropy was gathered during installation, you will have strong randomness forever. What can really hurt VM is snapshots/cloning: if you clone a VM then both machines will start with the same internal state, then slowly diverge. The interesting point is how fast they diverge; we currently lack data on that subject.
2d
answered How negative are virtual machines (vms) to /dev/urandom?
Oct
17
comment How many hostnames can be supported by a wildcard ssl certificate? Is there any limit?
@Bruno: it should be tested. RFC 2818 certainly allows wildcards to match partial names, but I am not sure deployed clients (Web browsers) actually support that. RFC 6125 lists it as a "may", which means that you cannot really count on it being universally supported.
Oct
17
comment How many hostnames can be supported by a wildcard ssl certificate? Is there any limit?
Note also that, stricto sensu, only the TBSCertificate is DER-encoded; the complete certificate structure may use BER with an indefinite length. However not many implementations support that. Moreover, the SAN extension is in the TBSCertificate.
Oct
17
comment How many hostnames can be supported by a wildcard ssl certificate? Is there any limit?
... BUT you have to subtract 1 because in 1016 bits, the biggest integer you can encode is 2^1016-1. AND then you have to add the length for the header (1 byte for the 0x30 tag, and 128 bytes for the encoding of the length).
Oct
17
awarded  Good Answer
Oct
17
awarded  Good Answer
Oct
16
answered Is the MAC address encapsulated in the Internet packets?
Oct
16
awarded  Nice Answer
Oct
16
answered Is 'correct' TLS Configuration dependant mainly on the Server?
Oct
16
revised Hardware Implementation of Encryption Algorithm
added 515 characters in body
Oct
16
answered Hardware Implementation of Encryption Algorithm
Oct
16
answered How many hostnames can be supported by a wildcard ssl certificate? Is there any limit?
Oct
15
answered PKI expired and renewed, do my correspondents have to do anything?
Oct
12
awarded  Yearling
Oct
11
awarded  Nice Answer
Oct
10
answered Why is using SSH key more secure than using passwords?