93,494 reputation
10134257
bio website
location
age 69
visits member for 3 years, 9 months
seen 1 hour ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Jun
5
answered Is SQL Server 2016's Deterministic Encryption any good?
Jun
4
comment What does the EC Private key version field mean?
Use: openssl pkcs8 -nocrypt -in mykep.pem This will try to read the file as a PKCS#8 file. If it works, then it is a PKCS#8 file.
Jun
4
answered How to disable a trail camera with a laser
Jun
4
comment What does the EC Private key version field mean?
The problem is not one of version. The problem is that BouncyCastle expects the private key as a PKCS#8 object. If what you provide is not a proper PKCS#8 object, then you get an exception.
Jun
4
answered What does the EC Private key version field mean?
May
29
answered Must a Diffie-Hellman group value persist?
May
29
awarded  hardware
May
28
answered Are consumer-grade routers any more or less vulnerable?
May
28
answered Is there any use in an AIA Extension in a Certificate directly issued by a Root CA?
May
28
answered Can a RootCA be revoked?
May
27
answered Hijack attacked SSL/TLS-connections?
May
27
answered Why does Google.com still support SSL v3?
May
26
comment GPG: Can't encrypt DSA 3072 keys
GPG supports DSA and DSA is a signature algorithm, so GPG will be perfectly happy to verify signatures using that key. That's the point of DSA being a signature algorithm and not an encryption algorithm: you can sign with it, you cannot encrypt with it.
May
26
answered /dev/random in EC2 cloud
May
26
comment GPG: Can't encrypt DSA 3072 keys
The idea is that, for some reason, you have a copy of the recipient's master key (usable for signatures only) but not of his encryption subkey. gpg only sees the signature key, and cannot use it for encryption.
May
26
answered GPG: Can't encrypt DSA 3072 keys
May
26
answered SSH Key: Ed25519 vs RSA
May
25
comment Prevent padding oracle attack on key exchange process
RSA-KEM uses no padding (that's its point) so it should be immune to padding oracle attacks. The random integer from which the key is derived must still be generated in the proper range with enough "uniform randomness". PKCS#1 preferred OAEP over KEM because the security proofs were "tighter" in all generality.
May
25
comment Is it worth it to implement both SHA2 and SHA3 at the same time?
PHC exists precisely because scrypt cannot be considered to be the one-and-only answer to such questions. In fact, scrypt was initially designed to support full hard disk encryption: at password hashing time, several seconds of CPU, and gigabytes or RAM, can be devoted to a single hashing operation. For a server that authenticates clients, the conditions are different, and forces a use of scrypt with other parameters (much less CPU and RAM usage) and it is unclear whether this yields a better bargain than bcrypt.
May
22
answered Is it worth it to implement both SHA2 and SHA3 at the same time?