77,798 reputation
7106207
bio website
location
age 69
visits member for 3 years
seen 1 hour ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Jun
20
answered Hashing Email Address and Contacting User
Jun
20
answered Is salted MD5 or salted SHA considered secure?
Jun
19
answered Diffie-Hellman certificate verify message
Jun
19
answered How can I prove to users of the software that the binaries I post match source code that's been inspected and verified by a third party?
Jun
19
awarded  ssl
Jun
18
awarded  Enlightened
Jun
18
awarded  Nice Answer
Jun
18
answered What type of probing sends GET /“ data ” to a server?
Jun
18
answered Why use 256-bit symmetric encryption in TLS when 2048-bit RSA doesn't even offer 128-bit strength?
Jun
18
answered SSL Server Certificate optional
Jun
18
comment Is a long salt usually sufficient for security purposes, even with MD5?
If there is a single hashed password, and the attacker has the hash value (and salt), then the attacker can run an offline dictionary attack (i.e. the attacker works on his own machines) and, indeed, only the algorithm slowness will stand between the attacker and the password. Good password hashing functions include both a salt, and a "configurable slowness" (with some sort of iteration count or something similar).
Jun
18
answered How does Java connect via SSL to a server without me providing any private/public key for the communication?
Jun
18
answered How long would it take to bruteforce an AES-128 protected pdf knowing the key is 20 letter long and that the charset is A-Z,0-9?
Jun
18
answered Is a long salt usually sufficient for security purposes, even with MD5?
Jun
18
answered Does an HTTPS proxy encrypt traffic between proxy client and server for HTTP requests?
Jun
18
awarded  malware
Jun
17
awarded  Nice Answer
Jun
17
answered Valuable languages for working malwares
Jun
17
answered Should we rethink our entire password strategy?
Jun
17
answered Why RSA signatures based on the hash of the message?