638 reputation
58
bio website coding-stories.com
location Paris, France
age 36
visits member for 4 years, 6 months
seen Jun 16 at 6:15

I am a software engineer specialized in Java and security/cryptography. I am also interested in testing and code quality topics.


May
22
awarded  Civic Duty
Jan
22
answered How to integrate AAA and otp
Jan
19
answered SSL/TLS: How to fix “Chain issues: Contains anchor”
Jan
19
awarded  Yearling
Jan
19
awarded  Commentator
Jan
13
comment Server-based PDF Signing using HSM
Well, PKCS#11 has been designed for personal smartcards and does not fit very well with cloud services. However, for instance, with the nCipher HSM (I have some experience with it) you can configure a quorum of operators required to access the key. Such a configuration can improve the trust on the system for the customers. Unfortunately I never used Cloud HSM. At first glance I think it is possible to build a signature service on a Cloud HSM. But I also believe that, first of all, it's worth an comprehensive threat analysis
Jan
12
answered Server-based PDF Signing using HSM
Nov
11
revised Using Client-side certificates for Authentication
typo
Nov
11
answered Using Client-side certificates for Authentication
Sep
25
comment How do systems protect against a stolen code-signing certificate after the certificate expires?
I realized that may be a bit unclear in my answer. I updated my answer trying to give a little bit more details.
Sep
25
revised How do systems protect against a stolen code-signing certificate after the certificate expires?
Adding more details
Sep
18
answered How do systems protect against a stolen code-signing certificate after the certificate expires?
Mar
11
answered Is it possible to boot an encrypted server remotely and securely?
Mar
11
comment How does encryption/decryption work when one generate random key?
I said "encrypted file" but maybe "encrypted data" is a better term. I mean, even with the password, the encrypted data (i.e. the cipher output) does not contain itself all required information to be decrypted. The algorithm parameters are also required such as the IV for a symmetric cipher, the PBKDF2 salt or iteration count... Of course, a file encryption software should gather all these information along with the encrypted data into the "encrypted file".
Mar
9
awarded  Citizen Patrol
Mar
8
answered How does encryption/decryption work when one generate random key?
Mar
8
answered What to do if you ever lose a smart card?
Mar
6
revised Root certifcate from an CA company which can be encrpyted by SoftHSM
added 23 characters in body
Mar
6
answered Root certifcate from an CA company which can be encrpyted by SoftHSM
Mar
3
answered valid PDF signature without using hardware HSM or usb Token