1,187 reputation
521
bio website
location
age
visits member for 2 years, 9 months
seen Aug 5 at 13:52

Oct
30
revised How secure is OS X's Keychain access control?
added 126 characters in body
Oct
30
asked How secure is OS X's Keychain access control?
Oct
30
answered How is the iCloud keychain protected from unauthorized access?
Oct
26
awarded  Popular Question
Oct
12
awarded  Necromancer
Sep
12
comment Can custom elliptic curves be used in common TLS implementations?
Hm, maybe we're better off that way - having to explicitly specify/announce it will probably avoid many compatibility issues (for example, libs that only support 25519 as a custom curve). Somebody apparently submitted a draft for Curve25519's use in TLS three days ago; maybe somebody will do the same for X.509 and Ed25519. Let's hope we'll see an implementation this decade :) ietfreport.isoc.org/idref/draft-josefsson-tls-curve25519
Sep
12
comment Can custom elliptic curves be used in common TLS implementations?
Thanks, that was very detailed and helpful! One more question: What about djb's Curve25519 and Ed25519? Could they be implemented by specifying a custom curve, or do the limitations you mentioned in your answer to a similar question still apply? (stackoverflow.com/a/2517052/1016939)
Sep
10
asked Is it possible to reliably derive a key from a biometric fingerprint?
Sep
10
comment RdRand from /dev/random
@CodesInChaos I agree, it is implemented in a weird way. Maybe they don't want to rule out a very specific weakness in the hash function used? But then /dev/random shouldn't be world-writable in the first place...
Sep
10
comment RdRand from /dev/random
For the way RdRand is currently used in Linux, see also this related question: crypto.stackexchange.com/questions/10283/…
Sep
9
accepted Can custom elliptic curves be used in common TLS implementations?
Sep
9
comment OpenSSL: Enable cipher suites per protocol version
I definitely agree; however, at least one popular SSL setup security validation/certification service didn't (for quite a while, they used to penalize any vulnerable cipher suites in their checks). Meanwhile, they've changed their opinion and now penalize RC4 instead... Also, Google seems to trust RC4 more than AES-CBC - at least, that's what they select for Google Chrome in my experience.
Sep
9
asked Can custom elliptic curves be used in common TLS implementations?
Sep
9
revised OpenSSL: Enable cipher suites per protocol version
added 93 characters in body
Sep
9
asked OpenSSL: Enable cipher suites per protocol version
Sep
6
comment Consequences of tampered /etc/ssh/moduli
Is SSH's /etc/ssh/moduli analogous to OpenSSL's dh{512,1024,2048}.pem file? I always thought those contained a fixed (non-ephemeral) secret DH value. If they are the same thing, can they also be world-readable and even shared between servers?
Sep
4
awarded  Commentator
Sep
4
comment Do mobile OS's provide crypto-quality randomness?
This drop-in replacement should be used to fix SecureRandom in any application relying a proper RNG: android-developers.blogspot.de/2013/08/…
Sep
1
revised Can an intermediate CA be trusted like a self-signed root CA?
added 356 characters in body
Aug
30
awarded  Popular Question