137,979 reputation
22271475
bio website bolet.org/~pornin
location Quebec City, Canada
age 39
visits member for 3 years, 7 months
seen 3 mins ago

Cryptographer, programmer in several languages (C, Java, several assemblies, Pascal, Forth...). I also have a life.


Jul
29
reviewed Approve suggested edit on windows-vista tag wiki excerpt
Jul
29
reviewed Approve suggested edit on API authentication without Oauth2 server
Jul
29
reviewed Approve suggested edit on windows-vista tag wiki
Jul
28
comment Root SSL certificates and browser support
Yes sending the root is useless. Even the RFC says so. It is just "traditional" and some software may need some coaxing so as not to send it.
Jul
28
answered Is a passphrase-protected SSH private key susceptible to a dictionary attack?
Jul
28
answered Speed of key generation - Is old hardware safer?
Jul
27
reviewed Approve suggested edit on surveillance tag wiki excerpt
Jul
26
answered Are there any public examples of an encrypted attribute in a Verisign-issued certificate?
Jul
26
comment If a MITM has your public key and you are SSH-ing through the MITM, what is the maximum attack it can perpetrate?
What I described is the authentication of the server key by the client. When you want to authenticate the client with a key of his own, the same process happens in the other direction as well: client signs some message (which includes some connection-specific elements) and the server verifies the signature, using the public key in the authorized_keys (on the server). There again, everybody can know your client public key (it is public) but nobody can forge such signatures (because this requires your private key, which does not leave your notebook).
Jul
26
answered What's the modp length of diffie-hellman-group-exchange-sha256?
Jul
26
answered If a MITM has your public key and you are SSH-ing through the MITM, what is the maximum attack it can perpetrate?
Jul
26
comment Root SSL certificates and browser support
In a typical Web context, most handshakes are abbreviated: client and server remember the previously exchanged secret and reuse it; no certificate is used in that case. You have one full handshake per new client, which is why this scarcely shows up in any measure.
Jul
26
answered Root SSL certificates and browser support
Jul
26
awarded  Nice Answer
Jul
26
awarded  Revival
Jul
26
awarded  mobile
Jul
25
answered Understanding SSL certificate signing
Jul
25
revised Avoiding MITM attacks when using HTTPS over mobile
edited tags
Jul
25
answered Avoiding MITM attacks when using HTTPS over mobile
Jul
25
answered best place to store backup encryption key