74,248 reputation
794188
bio website
location
age 69
visits member for 2 years, 11 months
seen yesterday

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Jul
25
answered how can I tell if I'm under IMSI cell phone surveillance
Jul
25
revised How to generate a superkey to decrypt strings
edited tags
Jul
25
answered How to generate a superkey to decrypt strings
Jul
24
comment Can any ECC field element be safely serialized as “compressed” and then restored as uncompressed?
Usually, in crypto, we use finite groups and rings and fields, where there is no notion of negative at all, since there is no natural ordering of elements (you cannot have a "less than" relationship compatible with the group law on a finite group).
Jul
24
answered Can any ECC field element be safely serialized as “compressed” and then restored as uncompressed?
Jul
24
comment GPG encryption and signing
Yes, with --sign you sign but you do not encrypt. Distinct operations. The --armor is not about encryption (as in: hiding information from people who don't know some specific key) but about surviving alterations in transit (as in: some email server will convert LF end-of-line characters to CR+LF, or will replace what it supposes to be an "unprintable character" with a "?"). The "armoring" is about coping with the careless way email servers handle emails. On a similar note, Base64 is also internally used when you send a binary attachment, for pretty much the same reason.
Jul
24
answered GPG encryption and signing
Jul
24
answered “Web of trust” for self-signed SSL certificates?
Jul
24
answered How do credit cards with chip+pin securely allow recurring transactions?
Jul
23
answered Can I safely use my own statistics to assess password strength on number of times a password is used?
Jul
23
answered What Linux software can I use to explore entropy of a file?
Jul
22
comment Broadband security question
You don't get downvoted when you are not trusted; you get downvoted when your questions or answers are poorly written, off-topic, or just plain wrong.
Jul
22
answered Broadband security question
Jul
22
answered PDF Digital Signature
Jul
22
comment Identifying suspicious encrypted traffic
It is good that Google uses TLS when they try to get new software version or to retrieve information about your Google+ account or anything like that. Otherwise it could be spied upon or altered by attackers. You should rejoice that such traffic is "encrypted". As for the port number, it does not really matter; in fact, using port 443 would be confusing if that which goes inside the TLS is not HTTP.
Jul
22
answered Identifying suspicious encrypted traffic
Jul
21
answered Would it be possible to add additional files to a password protected zip 2.0 file
Jul
21
answered What problem does ECC seek to fix compared to RSA?
Jul
21
revised In TLS1.2 AES-GCM mode, what happened when input is not exactly the multiple of its block size?
edited tags
Jul
21
answered In TLS1.2 AES-GCM mode, what happened when input is not exactly the multiple of its block size?