668 reputation
69
bio website coding-stories.com
location Paris, France
age 36
visits member for 4 years, 7 months
seen 10 hours ago

I am a software engineer specialized in Java and security/cryptography. I am also interested in testing and code quality topics.


2d
answered How can I uniquely identify an user when cookies are not an option?
Jul
28
awarded  Constituent
Jul
18
awarded  Caucus
Jul
17
answered What Country, State and City should I choose when requesting an SSL certificate?
May
22
awarded  Civic Duty
Jan
22
answered How to integrate AAA and otp
Jan
19
answered SSL/TLS: How to fix “Chain issues: Contains anchor”
Jan
19
awarded  Yearling
Jan
19
awarded  Commentator
Jan
13
comment Server-based PDF Signing using HSM
Well, PKCS#11 has been designed for personal smartcards and does not fit very well with cloud services. However, for instance, with the nCipher HSM (I have some experience with it) you can configure a quorum of operators required to access the key. Such a configuration can improve the trust on the system for the customers. Unfortunately I never used Cloud HSM. At first glance I think it is possible to build a signature service on a Cloud HSM. But I also believe that, first of all, it's worth an comprehensive threat analysis
Jan
12
answered Server-based PDF Signing using HSM
Nov
11
revised Using Client-side certificates for Authentication
typo
Nov
11
answered Using Client-side certificates for Authentication
Sep
25
comment How do systems protect against a stolen code-signing certificate after the certificate expires?
I realized that may be a bit unclear in my answer. I updated my answer trying to give a little bit more details.
Sep
25
revised How do systems protect against a stolen code-signing certificate after the certificate expires?
Adding more details
Sep
18
answered How do systems protect against a stolen code-signing certificate after the certificate expires?
Mar
11
answered Is it possible to boot an encrypted server remotely and securely?
Mar
11
comment How does encryption/decryption work when one generate random key?
I said "encrypted file" but maybe "encrypted data" is a better term. I mean, even with the password, the encrypted data (i.e. the cipher output) does not contain itself all required information to be decrypted. The algorithm parameters are also required such as the IV for a symmetric cipher, the PBKDF2 salt or iteration count... Of course, a file encryption software should gather all these information along with the encrypted data into the "encrypted file".
Mar
9
awarded  Citizen Patrol
Mar
8
answered How does encryption/decryption work when one generate random key?