980 reputation
520
bio website
location
age
visits member for 2 years, 5 months
seen yesterday

Sep
10
asked Is it possible to reliably derive a key from a biometric fingerprint?
Sep
10
comment RdRand from /dev/random
@CodesInChaos I agree, it is implemented in a weird way. Maybe they don't want to rule out a very specific weakness in the hash function used? But then /dev/random shouldn't be world-writable in the first place...
Sep
10
comment RdRand from /dev/random
For the way RdRand is currently used in Linux, see also this related question: crypto.stackexchange.com/questions/10283/…
Sep
9
accepted Can custom elliptic curves be used in common TLS implementations?
Sep
9
comment OpenSSL: Enable cipher suites per protocol version
I definitely agree; however, at least one popular SSL setup security validation/certification service didn't (for quite a while, they used to penalize any vulnerable cipher suites in their checks). Meanwhile, they've changed their opinion and now penalize RC4 instead... Also, Google seems to trust RC4 more than AES-CBC - at least, that's what they select for Google Chrome in my experience.
Sep
9
asked Can custom elliptic curves be used in common TLS implementations?
Sep
9
revised OpenSSL: Enable cipher suites per protocol version
added 93 characters in body
Sep
9
asked OpenSSL: Enable cipher suites per protocol version
Sep
6
comment Consequences of tampered /etc/ssh/moduli
Is SSH's /etc/ssh/moduli analogous to OpenSSL's dh{512,1024,2048}.pem file? I always thought those contained a fixed (non-ephemeral) secret DH value. If they are the same thing, can they also be world-readable and even shared between servers?
Sep
4
awarded  Commentator
Sep
4
comment Do mobile OS's provide crypto-quality randomness?
This drop-in replacement should be used to fix SecureRandom in any application relying a proper RNG: android-developers.blogspot.de/2013/08/…
Sep
1
revised Can an intermediate CA be trusted like a self-signed root CA?
added 356 characters in body
Aug
30
awarded  Popular Question
Aug
29
answered RSA vs. DSA for SSH authentication keys
Aug
22
asked What iOS apps use data protection?
Aug
8
asked iCloud backup - which keys are transferred to Apple?
Aug
7
asked iOS data protection: Who decrypts files transferred over USB?
Jul
20
awarded  Self-Learner
Jul
19
comment Why should one not use the same asymmetric key for encryption as they do for signing?
I agree that it's a bad idea. Nevertheless, S/MIME seems to provide both (encryption and signing) with a single key/certificate pair, if I'm not mistaken.
Jul
19
answered Is OpenGL a security problem?