152,866 reputation
25321520
bio website bolet.org/~pornin
location Quebec City, Canada
age 39
visits member for 3 years, 11 months
seen 7 hours ago

Cryptographer, programmer in several languages (C, Java, several assemblies, Pascal, Forth...). I also have a life.


Sep
12
revised Are all security requirements expected to be testable?
added 454 characters in body
Sep
12
revised HMAC - Why not HMAC for password storage?
edited tags
Sep
12
revised Is there any advantage to splitting a password?
edited tags
Sep
12
revised How does an SSL server prove its identity?
edited tags
Sep
12
revised How to achieve non-repudiation?
edited tags
Sep
12
revised Why do some websites and programs restrict password characteristics?
edited tags
Sep
12
comment Can custom elliptic curves be used in common TLS implementations?
Curve25519 has a special format which does not fit in the way a TLS server can specify a "generic curve". This does not preclude the existence of a future TLS extension which specifies Curve25519, but this has not happened yet; and even if that standard was written tomorrow, it would still take some substantial time (years, maybe decades) before non-negligible adoption occurs.
Sep
12
reviewed Reject suggested edit on How can you I detect low frequency brute forcing over multiple connections?
Sep
12
reviewed Reject suggested edit on How can I check wifi activity?
Sep
11
revised Is there any Linux distro or kernel patch that wipes a process memory space after the process exits?
added 198 characters in body
Sep
11
answered Why are some DLLs not randomized? What makes it hard to deploy full ASLR for all DLLs?
Sep
11
comment Is there any Linux distro or kernel patch that wipes a process memory space after the process exits?
Indeed, "it would be detrimental to performance because it would fill caches with the zeros"
Sep
11
reviewed Approve suggested edit on Using only private non-government resources, how can something be sent such that the NSA will see it?
Sep
11
reviewed Reject suggested edit on XKCD #936: Short complex password, or long dictionary passphrase?
Sep
11
answered Should I know my users passwords so I can check they can logon?
Sep
10
answered Is it possible to reliably derive a key from a biometric fingerprint?
Sep
10
answered Is there any Linux distro or kernel patch that wipes a process memory space after the process exits?
Sep
10
answered Configuring GCM cipher suites in Jetty based server
Sep
10
comment RdRand from /dev/random
Making /dev/random writable allows for manually inserting some "initial seed". Linux distributions do that: at boot time, they inject the contents of a file in /var, then immediately regenerate a new file for next boot. This allows a machine to have good randomness right from boot, even if it did not have enough hardware events yet (given that Linux's /dev/urandom never blocks, this mechanism is somewhat necessary).
Sep
10
answered Why two key DES algorithm provides only 80 bits security