181,594 reputation
28393604
bio website bolet.org/~pornin
location Quebec City, Canada
age 40
visits member for 4 years, 7 months
seen 1 min ago

Cryptographer, programmer in several languages (C, Java, several assemblies, Pascal, Forth...). I also have a life.


Feb
4
awarded  authentication
Feb
3
answered VPN Authentication over WiFi — Is it secure?
Feb
3
awarded  Nice Answer
Feb
3
comment How can I allow acces to encrypted data if only 2 out of 3 users provide a secret?
Threshold cryptography relies on heavy mathematics and objects with a lot of structure, which in turn implies strict size limitations. Using an intermediate secret key and symmetric encryption is "safe" if you take care to always generate a new private key for each message.
Feb
3
revised Protecting data on an embedded device
edited tags
Feb
3
answered Protecting data on an embedded device
Feb
3
answered Dual Authorization (Social Auth 2.0)
Feb
1
answered Website doesn’t always log me out – Privacy concern or am I overreacting?
Feb
1
reviewed Approve Monitoring file access on Windows
Jan
31
revised Can authentication in social networks through VPN defeat the purpose of the latter?
edited tags
Jan
31
answered Can authentication in social networks through VPN defeat the purpose of the latter?
Jan
31
answered How do clients enroll using SRP?
Jan
31
awarded  Nice Answer
Jan
31
reviewed Approve Difference between password expiration and account expiration
Jan
31
answered Email rejected by the server
Jan
31
answered Why not use client certificates for premaster key generation
Jan
31
comment The new CCMP attack against WPA/WPA2 PSK
No, I mean 4. "Speed increase of 50%" means "speed multiplied by 1.5", hence time is divided by 1.5. 6/1.5 = 4.
Jan
30
reviewed Approve Distributed IMAP-Dictionary-Attack-Tool?
Jan
30
answered How can I allow acces to encrypted data if only 2 out of 3 users provide a secret?
Jan
30
comment How does Windows 8's Microsoft Account authentication work?
Also, if some bad guy has admin rights on your computer, then that's not your computer anymore.