Reputation
1,641
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 5 8
Newest
 Editor
Impact
~55k people reached

Apr
6
awarded  Editor
Apr
6
revised How to deal with WPE users
"pose as" or "impersonate" are correct
Apr
6
suggested approved edit on How to deal with WPE users
Mar
25
comment Can the ransomware encryption key be derived from comparing encrypted and unencrypted files?
@JanDvorak: That's kind of a "no true Scotsman" argument right there. Neither symmetric nor asymmetric ciphers should be vulnerable to known plaintext attacks. Whether a particular cipher is vulnerable to the attack is a different question.
Mar
21
awarded  Commentator
Mar
21
comment Is it possible to get hacked if my bcrypt hash is publically known?
@SmokeDispenser: We are not trying to find the original input, we are trying to find any input that gives the same output. This is called a preimage attack.
Mar
21
comment Can I use SHA-512 hash as AES key?
You have a password, you need a key. That is exactly what a "key derivation function is"--it is something that creates a key from a password. SHA-512 is not a key derivation function, it is a hash, it is the wrong kind of thing to use.
Feb
17
comment Apple's open letter - they can't or won't backdoor iOS?
It's also been suggested that firmware updates to the separate hardware module would cause the existing keys to be erased.
Feb
14
awarded  Yearling
Mar
23
awarded  Supporter
Feb
14
awarded  Yearling
Feb
12
comment Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it?
@Timeless: The hash table method would never work, because the hash table would be too large, and it would take too much time to create the hash table. The state of the art technique for factoring large numbers is the general number field sieve which is still too slow for large numbers.
Sep
24
awarded  Autobiographer
Sep
16
comment JSON Web Tokens (JWT) as user identification and authentication tokens
GCM is an authenticated encryption mode, so it does provide authentication.
Feb
14
awarded  Yearling
Dec
26
awarded  Cleanup
Dec
26
comment Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it?
@juanpastas: Your edit is incorrect. If you use the product xy as your password, then the scheme does not work. The password is both numbers, and the product is stored in the password database.
Dec
26
revised Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it?
rolled back to a previous revision
Oct
28
awarded  Great Answer
Feb
14
awarded  Yearling