195 reputation
6
bio website Grieu
location
age
visits member for 2 years, 10 months
seen Oct 1 at 4:59

Sep
3
revised How can an email sender include his PGP key, so I can answer with an encrypted mail?
actually prepared that email- > actually prepared that initial email's attachment
Sep
3
revised How can an email sender include his PGP key, so I can answer with an encrypted mail?
Refer to other answer
Sep
3
answered How can an email sender include his PGP key, so I can answer with an encrypted mail?
Mar
26
comment Why does the linux XRDP module use a 512 bit RSA key?
The question, or at least this well-informed answer, should probably be moved or copied here
Feb
17
comment Snapchat clone: How do I secure pre-downloaded notifications so that they cannot be opened outside of the app?
Cryptography alone can't achieve the goal in the question.
Dec
18
comment Do modern Android devices provide access to their Secure Elelement in some way?
Many thanks! I have checked this. It works on some relatively recent real hardware, including inability to export the key, but only for RSA keys of 2048 bits, nothing else that I could find. Also, I found no way that a remote internet server could ascertain that a key is in the keystore and was generated there, or inject such key there securely.
Dec
18
accepted Do modern Android devices provide access to their Secure Elelement in some way?
Dec
9
awarded  Commentator
Dec
9
comment Do modern Android devices provide access to their Secure Elelement in some way?
Looks very much like THE answer! I'll accept it in a few days.
Dec
9
asked Do modern Android devices provide access to their Secure Elelement in some way?
Mar
19
comment Lessons learned and misconceptions regarding encryption and cryptology
"use TLS" without fine prints is not such a good idea, when we see this
Mar
11
comment Truecrypt compromised? (Coldboot attack)
To me, the question is squarely off-topic, and belongs to security.se. Also, the attack linked to in the question does not "retrieve decryption keys from a device's RAM (even after shutdown)"; as far as I understand, it retrieves the keys either from a running computer using a well-know attack using DMA-thru-Firewire (which is highly system-specific), or from an hibernation file when the computer was hibernated with the volume mounted; I'm not sure what are the fine prints for the later to work.
Oct
8
awarded  Teacher
Oct
8
answered How to protect encryption key while application is using it
Apr
27
comment What are the risks of storing passwords in a GPG encrypted file?
The main risk IMHO is having the machine compromised; that applies equally to both solutions considered. An attack seems easier to mount on the command-line solution (e.g. with a trojan in any of gpg/grep/less/bash/kernel, or a keylogger in hardware or software), on the other hand a malware could target the other program if it gets audience.
Dec
9
awarded  Scholar
Dec
9
accepted On-line cryptographically signed date/time?
Dec
7
comment On-line cryptographically signed date/time?
@bstpierre: My overall application is that the trusted device produce certs of some sort, with a limited period of validity from current date/time. Certs in the future would be a serious issue. If the time service is run in-house, the people able to tamper with it are the same (or close) to the ones with an incentive to do so, in order to subvert the trusted device to generate certs in the future. Thus I prefer an independent date/time source.
Dec
6
revised On-line cryptographically signed date/time?
Even more late additions
Dec
6
revised On-line cryptographically signed date/time?
More late additions