166,737 reputation
25347561
bio website bolet.org/~pornin
location Quebec City, Canada
age 39
visits member for 4 years, 4 months
seen 12 hours ago

Cryptographer, programmer in several languages (C, Java, several assemblies, Pascal, Forth...). I also have a life.


Oct
15
comment Why are the first 16 bits of the message digest not encrypted in PGP?
No. Revealing 16 bits of a piece of information which is already publicly shown does not compromise security.
Oct
15
answered Why are the first 16 bits of the message digest not encrypted in PGP?
Oct
15
answered Do on-demand SSL certificates exist?
Oct
15
answered Different SSL states as seen by Safari, Chrome and Firefox
Oct
15
comment Payload authentication + HW-SW Binding
So 1. your "hardware key" is probably not secret (the PRNG+SHA-3 don't change it; if the attacker can guess the hardware properties he can recompute the PRNG+SHA-3); 2. I don't know your hardware requirements, but RSA-2048 signature verification fits in less than 300 bytes of RAM; 3. If you can put the HMAC value in B_trusted then forget all this and just put a simple hash value B_trusted, as explained in the beginning of my answer.
Oct
15
awarded  Nice Answer
Oct
14
answered Payload authentication + HW-SW Binding
Oct
14
awarded  Nice Answer
Oct
13
awarded  Nice Answer
Oct
13
revised Certificate Mapping in IIS
edited tags
Oct
13
answered Certificate Mapping in IIS
Oct
13
awarded  Enlightened
Oct
13
awarded  Nice Answer
Oct
12
revised SSL (TLS v1.2) - Can i offer fallback CAs when upgrading Certificates? (Java)
edited tags
Oct
12
answered SSL (TLS v1.2) - Can i offer fallback CAs when upgrading Certificates? (Java)
Oct
12
awarded  Nice Answer
Oct
12
revised Encrypting something with multiple keys such that k out of n keys are needed; what's it called?
added 1567 characters in body
Oct
12
answered Encrypting something with multiple keys such that k out of n keys are needed; what's it called?
Oct
11
reviewed Approve Intrusions attempt monitoring (on MacOS X)
Oct
11
answered Key-agreement protocol in a REST API