530 reputation
37
bio website coding-stories.com
location Paris, France
age 35
visits member for 3 years, 10 months
seen Oct 18 at 16:56

I am a software engineer specialized in Java and security/cryptography. I am also interested in testing and code quality topics.


Sep
25
comment How do systems protect against a stolen code-signing certificate after the certificate expires?
I realized that may be a bit unclear in my answer. I updated my answer trying to give a little bit more details.
Sep
25
revised How do systems protect against a stolen code-signing certificate after the certificate expires?
Adding more details
Sep
18
answered How do systems protect against a stolen code-signing certificate after the certificate expires?
Mar
11
answered Is it possible to boot an encrypted server remotely and securely?
Mar
11
comment How does encryption/decryption work when one generate random key?
I said "encrypted file" but maybe "encrypted data" is a better term. I mean, even with the password, the encrypted data (i.e. the cipher output) does not contain itself all required information to be decrypted. The algorithm parameters are also required such as the IV for a symmetric cipher, the PBKDF2 salt or iteration count... Of course, a file encryption software should gather all these information along with the encrypted data into the "encrypted file".
Mar
9
awarded  Citizen Patrol
Mar
8
answered How does encryption/decryption work when one generate random key?
Mar
8
answered What to do if you ever lose a smart card?
Mar
6
revised Root certifcate from an CA company which can be encrpyted by SoftHSM
added 23 characters in body
Mar
6
answered Root certifcate from an CA company which can be encrpyted by SoftHSM
Mar
3
answered valid PDF signature without using hardware HSM or usb Token
Feb
27
awarded  Editor
Feb
27
revised Does Google use extended validation certificates
typo
Feb
27
answered Does Google use extended validation certificates
Feb
26
answered How do you overcome the problem of the salt being public and known by the attacker?
Feb
26
comment Signing my certificate by using my smart card and eID card?
When you are talking about keyserver, do you mean GPG keyserver?
Feb
26
comment Signing my certificate by using my smart card and eID card?
I do not know if it is a common practice and it depends on what you want to do with your certificate. For instance if you want some third parties to validate some documents you signed, you should use the signature certificate. If you want to authenticate yourself against a web site or web service (e.g. using a SSL connection with client authentication) you should use the authentication certificate. See the CPS sections 1.3 and 1.8 for more details on the certificate usages.
Feb
26
answered Signing my certificate by using my smart card and eID card?
Nov
7
awarded  Critic
Dec
22
awarded  Yearling