2,123 reputation
422
bio website pwnhome.wordpress.com
location Earth
age
visits member for 3 years, 7 months
seen 11 hours ago

"I like turtles"


May
13
comment Ensure that a file can only be decrypted after a specific date
You can always break the key up using secret sharing and give shares to a bunch of third parties. You don't have to trust any one individually, you only have to trust that some fraction of them (and maybe the fraction is 1) do not reveal their shares too early.
Apr
13
comment Is this approach to backups secure?
@Basic RE MD5, MD5 alone does not provide cryptographic integrity protections as there is no secret. Often for integrity, we use HMAC or authenticated encryption, or digital signatures.
Apr
13
comment Is this approach to backups secure?
@Basic it is not due to which blocks are "garbled" but more deals with the meaning of "garbled". Sure, if you know that ciphertext encrypts some well structured data, an attacker modifying the ciphertext is very very likely to no longer conform to the structure. And you could detect that. A good cryptographic primitive should work no matter what the plaintext is (and sometimes even if the attacker chooses the plaintext). So, if you are encrypting random data, how do you detect that it is garbled?
Apr
13
answered Is this approach to backups secure?
Apr
13
comment Is this approach to backups secure?
Is there no existing software that meets your needs? Why reinvent the wheel?
Apr
12
comment Is this approach to backups secure?
Where/how is the IV generated? You can't just throw Crypto at a problem. What mode of operation? How large of keys, etc?
Apr
9
comment Can I save passwords in my app securely and retrieve them without asking for a master password?
I'm going to migrate this to Security.SE as it is a much better fit there. That said, you should better define the environment you are working in.
Mar
9
awarded  Popular Question
Feb
16
comment Questions about SRP algorithm
This was also posted to SO. Please dont post to multiple sites.
Feb
7
awarded  Custodian
Jan
23
awarded  Nice Answer
Jan
21
comment TrueCrypts full Disk Encryption still secure?
Your answer is all opinion, no fact and is not even backed up by sound logic. -1
Nov
26
comment Email Encryption
S/MIME
Nov
15
awarded  Yearling
Oct
29
comment Find DES encryption key having input and encrypted output
@TomLeek cool, thanks for the correction.
Oct
28
comment Find DES encryption key having input and encrypted output
Beat me to it. I wasn't sure at first as I haven't seen the DES format in a long time (was expecting a $). Note to OP: you can test it in python. First do "import crypt" then "crypt.crypt('kenanfx', 'csund')" and you will get "csund6XMTudO6" back. 'csund' is the salt in this case.
Oct
28
comment Find DES encryption key having input and encrypted output
I'm confused. Is it encrypted using DES, or are we talking unix password encryption using DES?
Oct
9
comment Two takes on PHP two way encryption - which one is preferable?
Cross posted on SO. Cross posting is against SE policy.
Sep
30
awarded  Explainer
Sep
24
awarded  Autobiographer