85,501 reputation
9121232
bio website
location
age 69
visits member for 3 years, 5 months
seen Mar 15 at 23:57

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Nov
14
answered Can Fiddler decrypt HTTPS traffic when using elliptic curves + client cert authetication?
Nov
14
awarded  Nice Answer
Nov
13
answered In a browser web server communication, who decides which encryption protocol to use
Nov
13
answered Mechanisms to prevent error propagation in wireless networks with respect to the avalanche effect
Nov
13
comment Machine Certificate Key File Artifacts
Windows stores private keys with encryption, but the encryption is ultimately based on the password of the account that owns the key. If a machine can boot up alone and use a private key, then that machine necessarily "knows" everything that is needed to access the private key, and thus the key can be recovered. That private key encryption is there to defeat some attackers with only partial access (they can read some files, not all of them), to block a few unsophisticated malware that scan RAM brutally, and, of course, to make a show of "having sprinkled crypto everywhere".
Nov
12
comment Security of pronounceable passwords
I'd say that if passwords are hashed with a weak algorithm then you should fix that first. This is only technology -- far easier to do than changing users' minds.
Nov
12
comment Security of pronounceable passwords
40 bits of entropy are not bad, if you use the passwords for, say, user authentication on a server that uses proper password hashing like bcrypt with a high enough iteration count. If the server uses 1 second worth of CPU to check a password, an attacker with 1000 PC will need 15 years on average to crack a password with 40 bits of entropy, which should be enough to deter him.
Nov
12
comment Security of pronounceable passwords
Yes, I have used a minimizing approximation: I have deliberately restricted myself to a subset of "pronounceable passwords", so that I could more easily compute the number of combinations. The subset is still sufficient to make the main point that the number of pronounceable passwords far exceeds the number of existing English words.
Nov
12
answered Security of pronounceable passwords
Nov
11
awarded  Enlightened
Nov
11
awarded  Good Answer
Nov
11
awarded  Enlightened
Nov
10
comment How bad is it to truncate a hash?
It is possible to define quite contrived hash functions that show how resistances to preimages, second preimages and collisions are distinct concepts. However, if you resist collisions then you resist second preimages at least as well (though you normally expect a much better resistance for second preimages than for collisions).
Nov
10
awarded  Nice Answer
Nov
10
comment How bad is it to truncate a hash?
@NWard: for a collision, you challenge the attacker with finding two distinct inputs that hash to the same value. For a second preimage, you issue the same challenge with the additional constraint that you fix one of the two messages that are to collide. (So it makes sense that finding a second preimage is harder than finding a collision.)
Nov
10
answered How bad is it to truncate a hash?
Nov
10
comment How can I check the integrity of the downloaded files?
"Integrity" does not mean "the file is nice and innocuous". Integrity is about making sure that a given file is exactly the same as it was at its source. It says nothing about the trustworthiness of the source; only that the file was not altered in transit.
Nov
10
answered Does OpenSSL have stat for read change cipher spec (SSL3_ST_CR_CHANGE_A)
Nov
9
revised What is the impact of RSA key's size on CPU load?
edited tags
Nov
9
answered What is the impact of RSA key's size on CPU load?