75,843 reputation
798194
bio website
location
age 69
visits member for 3 years
seen 6 hours ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Aug
15
awarded  Nice Answer
Aug
14
answered Should content from database be sanitized again
Aug
14
answered Choosing right way to secure access to server access via socket
Aug
14
answered What is the purpose of “g” -> generator of the multiplicative group
Aug
14
answered Does where I put my PKI certificates matter?
Aug
14
awarded  man-in-the-middle
Aug
13
answered Can we trust antivirus software?
Aug
13
answered Is it possible to USB whitelist in Linux?
Aug
13
comment Is there a secure way to create and distribute Shamir Secrets?
"Dynamically composing a secret that no-one knows, and decrypting it": that is called Diffie-Hellman, when you think about it. The "shares" are the private/public DH pairs for both participants, that they generate freely, and they build the shared secret by combining their private key with the public key from the peer.
Aug
12
comment Is there a secure way to create and distribute Shamir Secrets?
I am not sure your question makes sense. Asymmetric encryption is about protecting the confidentiality of some data -- data which already exists. With group decryption, the collaborating private key owners recover the original plaintext, and they all get it; the point is that they do not reveal each other their key shares: further decryption will still need a threshold of key owners.
Aug
12
answered Is there a secure way to create and distribute Shamir Secrets?
Aug
12
comment Can virus save to SIM Card?
"Rooting" a phone is often done with the computer equivalent of bashing through a door with a sledgehammer. Some unintended side-effects may occur. The symptoms you describe match more mundane bugs than a true virus. Modern virus don't remove some buttons or reboot phones; they either try to keep invisible, or, if they really want to spread mayhem, they destroy the phone a lot more effectively.
Aug
12
awarded  Nice Answer
Aug
11
answered TLS 1.2 Older Browser Compatibility
Aug
11
comment Is it Possible to use one commercial SSL Certificate to issue end user certs?
Some commercial CA do sell intermediate CA certificates (I once made such a deal with GlobalSign), but only through a heavy contractual agreement with constraints (e.g. they require that you store the private key in a HSM), and the price is non-negligible.
Aug
11
answered Is it Possible to use one commercial SSL Certificate to issue end user certs?
Aug
10
answered Using AES as a Stream Cipher
Aug
9
awarded  Nice Answer
Aug
5
awarded  Enlightened
Aug
5
awarded  Nice Answer