76,073 reputation
798196
bio website
location
age 69
visits member for 3 years
seen 1 min ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Jul
29
awarded  Enlightened
Jul
29
awarded  Nice Answer
Jul
29
answered Websites Forcing Weak Password Standards (Updated)
Jul
29
comment Known characters in passwords?
Honestly, I don't need the tell-tale '==' signs to recognize 'gorv/cp+lSiwiEfKck2dVg' as some Base64 encoding.
Jul
29
answered Will a DDOS attack prevent outbound traffic?
Jul
29
answered Known characters in passwords?
Jul
29
answered security in banking app with 4 digit pin code and social security number
Jul
29
answered 4 bytes authentication problem
Jul
29
answered Does glibc use canary checking to prevent heap buffer overflow?
Jul
29
answered Is this Facebook email real or phishing?
Jul
29
awarded  Nice Answer
Jul
28
answered Password Cracking Mandarin Words English Character Set
Jul
28
comment XTS vs AES-CBC with ESSIV for file-based filesystem encryption
GnuPG's better encryption comes from the fact that it processes the whole file in one go, with a fresh random IV. All the difficulty of FDE is that it tries to support efficient updates, where only the data chunks that are updated get reencrypted. In the file-on-Dropbox case, the encryption should really occur when uploading the filesystem image, not for each file write.
Jul
28
comment XTS vs AES-CBC with ESSIV for file-based filesystem encryption
If you put the encrypted filesystem only once, then there is no problem. Just do it. Potential vulnerabilities begin to occur if you then retrieve the filesystem, modify it, then put it back on Dropbox: the successive versions become visible to attackers. What you can do is to take a filesystem image (not necessarily encrypted with anything), then encrypt it with GnuPG before upload, and decrypting it when downloading it. This will be stronger, both against passive and active attackers.
Jul
28
revised XTS vs AES-CBC with ESSIV for file-based filesystem encryption
edited tags
Jul
28
answered XTS vs AES-CBC with ESSIV for file-based filesystem encryption
Jul
28
answered VPS Privacy: OpenVZ vs KVM vs Xen
Jul
28
answered SHA and “Bits of Security”
Jul
28
comment EAP-TLS fragmentation implementation
For the CertificateVerify, you must hash all previous messages, so ClientHello, ServerHello, Certificate (from server), ServerKeyExchange, CertificateRequest, ServerHelloDone, Certificate (the one from the client) and ClientKeyExchange.
Jul
28
answered EAP-TLS fragmentation implementation