meta user
network profile
| bio | website | pwnhome.wordpress.com |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 6 months |
| seen | yesterday | |
| stats | profile views | 31 |
"I like turtles"
|
May 9 |
awarded | Organizer |
|
May 9 |
revised |
Decrypting TLS in Wireshark when using DHE_RSA ciphersuites edited tags |
|
Apr 10 |
awarded | Nice Answer |
|
Apr 10 |
answered | Why have username AND password? |
|
Feb 27 |
awarded | Quorum |
|
Nov 15 |
awarded | Yearling |
|
Sep 20 |
comment |
Why is Elliptic Curve Cryptography not used much outside of government? @dongle26, depends on how ECC is configured, but yes you can configure ECC to be just as strong as RSA-2048. See keylength.com |
|
Sep 17 |
comment |
What's the State of the Art of Homomorphic Encryption? Homomorphic encryption is not the only technique available for performing computation on encrypted data. Multi-party computation protocols is another technique which is quite practical in real life. |
|
Sep 7 |
comment |
Password-free logins using your email address only? Similar ideas have been studied. See SAW. |
|
Aug 8 |
comment |
Can signing too much compromise a private key? Do you have any references? |
|
Aug 7 |
answered | Can signing too much compromise a private key? |
|
Aug 7 |
answered | Can public keys be a security risk when performing password-less SSH logins? |
|
Jun 25 |
comment |
How do I protect user data at rest? @user5621, a lot of my email addresses will not fit in a single 128 bit block (16 characters). That said, let's assume that all email addresses and usernames are no bigger than 16 characters. Are there any glaring issues? No. Still, I'd rather be safe than sorry. |
|
Jun 25 |
comment |
How do I protect user data at rest? The simplest method is not always the best. It appears that aes_encrypt() uses ECB mode. |
|
Apr 23 |
answered | X509 mutual authentication: is there a security flaw? |
|
Apr 23 |
comment |
Why most people use 256 bit encryption instead of 128 bit? @HM, crypto.stackexchange.com/a/753/706 |
|
Apr 2 |
revised |
Is a self signed certificate sufficient to prove the integrity of my executable? Corrected the incorrect advice of using MD5/SHA1 as MD5/SHA1 are broken (see comments). |
|
Apr 1 |
comment |
Is a self signed certificate sufficient to prove the integrity of my executable? @LazyBadger, furthermore, if you ask me, the burden of proof is not on me, it is on the designer of a system. Prove to me that breaks in MD5 will not break your design. Look at any cryptosystem or system which uses cryptography. They all present strong proofs as to why their construction should be considered secure. This is a crucial step in designing a security system. |
|
Apr 1 |
suggested | suggested edit on Is a self signed certificate sufficient to prove the integrity of my executable? |
|
Apr 1 |
comment |
Is a self signed certificate sufficient to prove the integrity of my executable? @LazyBadger, it is not an "empty loud" statement. No respectable cryptographer would suggest the use of MD5 in a new design today. Even though preimage attacks are currently not feasible (collision attacks are, however), attacks only get better. They are currently better than brute force, which is the definition of a broken hash function. |
