1,310 reputation
621
bio website
location
age
visits member for 3 years
seen 1 hour ago

Apr
10
awarded  Popular Question
Apr
9
awarded  Nice Question
Apr
9
asked Why does TLS need an explicit heartbeat protocol?
Mar
3
accepted What iOS apps use data protection?
Mar
1
awarded  Nice Answer
Dec
15
awarded  Nice Question
Dec
11
accepted Is OpenGL a security problem?
Dec
11
accepted Is there a way to mitigate BEAST without disabling AES completely?
Nov
2
awarded  Yearling
Oct
30
revised How is the iCloud keychain protected from unauthorized access?
added 6 characters in body
Oct
30
awarded  Critic
Oct
30
revised How is the iCloud keychain protected from unauthorized access?
added 1070 characters in body
Oct
30
revised How secure is OS X's Keychain access control?
added 126 characters in body
Oct
30
asked How secure is OS X's Keychain access control?
Oct
30
answered How is the iCloud keychain protected from unauthorized access?
Oct
26
awarded  Popular Question
Oct
12
awarded  Necromancer
Sep
12
comment Can custom elliptic curves be used in common TLS implementations?
Hm, maybe we're better off that way - having to explicitly specify/announce it will probably avoid many compatibility issues (for example, libs that only support 25519 as a custom curve). Somebody apparently submitted a draft for Curve25519's use in TLS three days ago; maybe somebody will do the same for X.509 and Ed25519. Let's hope we'll see an implementation this decade :) ietfreport.isoc.org/idref/draft-josefsson-tls-curve25519
Sep
12
comment Can custom elliptic curves be used in common TLS implementations?
Thanks, that was very detailed and helpful! One more question: What about djb's Curve25519 and Ed25519? Could they be implemented by specifying a custom curve, or do the limitations you mentioned in your answer to a similar question still apply? (stackoverflow.com/a/2517052/1016939)
Sep
10
asked Is it possible to reliably derive a key from a biometric fingerprint?