148,941 reputation
25310506
bio website bolet.org/~pornin
location Quebec City, Canada
age 39
visits member for 3 years, 10 months
seen 2 hours ago

Cryptographer, programmer in several languages (C, Java, several assemblies, Pascal, Forth...). I also have a life.


3h
answered Are there any good tools to test the encryption quality of data?
4h
answered Any ways to protect my user data on company computers?
6h
answered How safe is it to use older/unknown Encryption methods for plaintext?
6h
answered How well is the SSL/TLS handshake protected against modifications?
1d
awarded  Guru
1d
awarded  Nice Answer
2d
answered Is my phone carrier monitoring my traffic?
2d
answered Can the IV + Salt be the same?
2d
answered Assuming malicious admin, what threats does a dedicated server mitigate vs VPS?
Oct
25
awarded  Great Answer
Oct
24
revised Is a rand from /dev/urandom secure for a login key?
added 164 characters in body
Oct
24
answered Shall I set “RSAAuthentication yes” in sshd_config if I use only ECDSA key?
Oct
24
answered Generating deterministic X.509 certificates?
Oct
24
answered Old floppy disk protection
Oct
24
comment SSL Mixed Scripting Vulnerabilities and XOR Attacks
Stream cipher usage in SSL/TLS is described in the TLS standard, section 6.2.3.1. The important sentence is: "the stream cipher state from the end of one record is simply used on the subsequent packet".
Oct
24
answered SSL Mixed Scripting Vulnerabilities and XOR Attacks
Oct
23
awarded  Revival
Oct
23
awarded  Good Answer
Oct
23
awarded  Guru
Oct
23
answered SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection- medium or low risk?