73,598 reputation
793187
bio website
location
age 69
visits member for 2 years, 10 months
seen 4 hours ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


May
22
answered SSL security display
May
22
answered SSL VPN Detection and possible to block
May
22
comment Is it appropriate to use haveged as a source of entropy on virtual machines?
Cryptographers use detailed and thorough peer review to get some assurance that their design is not obviously bad. Now that's not really great. My point, though, is that statistical tests are terrible at evaluating security. Such tests can only detect extremely poor and weak PRNG. It is easy to make a PRNG which will pass all such tests (hey, even a LFSR can do it). From a cryptographer's point of view, it is not even worth reporting. To make an analogy: it looks like a car manufacturer who publishes big ads stating that his cars are great because he has ve-ri-fied that they have wheels.
May
22
answered SSL reconstruction with missing part
May
21
answered Do software systems become more secure every year?
May
21
answered Encryption and Layers understanding
May
21
answered According to RFC 5246, are nonces in TLS useless (in terms of security) and if yes, why aren't they only random data?
May
17
answered SSH MITM attack underway
May
16
answered User agent information from HTTPS flow
May
16
answered Why are OSX users of my TLS-only site being asked to supply a client certificate?
May
16
answered Why do we need WTLS?
May
16
answered In IKE protocol; what is the PRF?
May
16
answered How can a site know about insecure password?
May
15
answered SSL/TLS version switch over reason
May
14
answered Encrypt and Authenticate localhost-traffic?
May
14
answered A doubt in certificate chain validation and revocation checking
May
13
answered TLS v 1.1 vulnerabilities
May
12
answered Crazy Finished Message in TLS
May
4
awarded  Nice Answer
May
3
awarded  Nice Answer