395 reputation
210
bio website
location Wellington, New Zealand
age
visits member for 2 years, 1 month
seen 6 hours ago

I am an undergraduate computer science and mathematics student in New Zealand. My fields of interest are computer graphics, in particular the physics of light transport, and to some extent cryptography, as well as programming and software development in general.


Apr
12
comment How difficult to crack keepass master password?
@Pacerier Except most of these are not practical yet. If you are able to predict the future evolution of computing power with exotic hardware, then you can certainly make a good estimate of what constitutes a "hard problem". Most of us can't.
Feb
26
comment Why are salted hashes more secure?
@tylerl Thank you
Feb
24
comment Is using SHA-512 for storing passwords tolerable?
@SnakeDoc It is cryptographically secure, it's just not designed to be a password-based KDF.
Feb
22
comment Why are salted hashes more secure?
Could you please add a final paragraph about key stretching and using a proper KDF, otherwise this post is going to spawn yet more sha1(salt || pwd) schemes by users who only read this answer and went to do their thing. I know it's technically off-topic but we really need to fight this by trying not to suggest to use this directly.
Feb
8
comment Bad practice to have a “god” password?
This account has been terminated for the following reason: unauthorized access to donuts.
Jan
29
comment My home PC was hacked and accessed my bank! Advice on next steps?
s/not find/find
Jan
18
comment What is the excellence of RSA vs my algorithm
It's quite easy to obtain d from e. Just run the "test" function on it and get a (somehow) valid "d" for it. Oops? What does your algorithm do? It's nonsense as it is now.
Jan
14
comment Forward secrecy for kids
@ewanm89 It gets rather tedious doing it by hand for 1024+ bit parameters.
Dec
27
comment How to change TEA round count?
Well, in all fairness, now that I read it again, my comment was somewhat tautological. Glad you found the problem though!
Dec
27
comment How to change TEA round count?
There's probably something else you didn't change that's still assuming 32 rounds are used and that's throwing decryption off.
Dec
21
comment Can the xor of two RNG outputs ever be less secure than one of them?
If they are the same, there may be a slight bias in the output...
Dec
18
comment One time pad encryption
If the key is shorter than the plaintext, it's not an OTP. How that cipher handles wrap-around is up to how it is defined, but usually the key is repeated from the start (and you get a Vigenere cipher).
Nov
28
comment What to do when I found a spyware that my spouse has installed?
@Adnan Good to know, thanks. I would still recommend a reinstall just for peace of mind, though.
Nov
28
comment What to do when I found a spyware that my spouse has installed?
But what if she knows that he knows that she doesn't know that he knows?
Nov
28
comment What to do when I found a spyware that my spouse has installed?
Why would you trust a keylogger to only send its stuff to the given email address and happily uninstall itself without leaving behind something even worse? The argument would have been valid if she had written the keylogger from scratch (sort of) and she obviously didn't. Nuke from orbit then have a talk.
Nov
8
comment Cryptography that looks like ordinary email
@Dakeyras Have you tried it? Encoding data to approximate the statistical properties of a legitimate carrier is ultimately what steganography is all about, you make it sound like a solved problem, but in reality this is hard to achieve and you have to work hard to reach a point where only a determined analyst would not be fooled.
Nov
8
comment Cryptography that looks like ordinary email
@Dakeyras Except it doesn't. The least significant bit of most images doesn't follow a uniform distribution. It might be imperceptible to the human eye, but an algorithm checking the statistical properties of the LSB of each pixel will detect that bias instantly. This method is popular, and there will be such an algorithm somewhere along the way.
Nov
3
comment What does the email header-line “message opened by mailclient” mean?
I initially read the title as "opened by malicient", as in "malicious client". Interesting..
Oct
14
awarded  Citizen Patrol
Sep
20
comment How can I measure (and increase) entropy on Mac OS X?
This question appears to be off-topic because it is about software use of cryptography.