89,911 reputation
9126248
bio website
location
age 69
visits member for 3 years, 7 months
seen 7 hours ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


12h
comment GPG: Can't encrypt DSA 3072 keys
GPG supports DSA and DSA is a signature algorithm, so GPG will be perfectly happy to verify signatures using that key. That's the point of DSA being a signature algorithm and not an encryption algorithm: you can sign with it, you cannot encrypt with it.
12h
answered /dev/random in EC2 cloud
12h
comment GPG: Can't encrypt DSA 3072 keys
The idea is that, for some reason, you have a copy of the recipient's master key (usable for signatures only) but not of his encryption subkey. gpg only sees the signature key, and cannot use it for encryption.
13h
answered GPG: Can't encrypt DSA 3072 keys
1d
answered SSH Key: Ed25519 vs RSA
1d
comment Prevent padding oracle attack on key exchange process
RSA-KEM uses no padding (that's its point) so it should be immune to padding oracle attacks. The random integer from which the key is derived must still be generated in the proper range with enough "uniform randomness". PKCS#1 preferred OAEP over KEM because the security proofs were "tighter" in all generality.
1d
comment Is it worth it to implement both SHA2 and SHA3 at the same time?
PHC exists precisely because scrypt cannot be considered to be the one-and-only answer to such questions. In fact, scrypt was initially designed to support full hard disk encryption: at password hashing time, several seconds of CPU, and gigabytes or RAM, can be devoted to a single hashing operation. For a server that authenticates clients, the conditions are different, and forces a use of scrypt with other parameters (much less CPU and RAM usage) and it is unclear whether this yields a better bargain than bcrypt.
May
22
answered Is it worth it to implement both SHA2 and SHA3 at the same time?
May
22
answered What makes an Android application vulnerable to SQL Injection?
May
22
comment Should diffie-hellman parameters be unique to a vhost
The known methods for reusing breaking efforts work as long as the several attacked DH instances all use the exact same modulus. If the modulus has a different size, then, in particular, it is not the exact same modulus, and reuse does not apply.
May
22
answered Should diffie-hellman parameters be unique to a vhost
May
22
awarded  certificates
May
21
awarded  Enlightened
May
21
awarded  Nice Answer
May
21
answered Crypto for penetration test
May
21
answered Choose your own exponents in RSA?
May
21
answered Do Diffie-Hellman parameters need to be recreated regularly?
May
21
awarded  Enlightened
May
21
awarded  Nice Answer
May
20
answered SSL/TLS client authentication - practical client cert validation