meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 2 months |
| seen | yesterday | |
| stats | profile views | 25 |
|
Aug 4 |
comment |
How does disk encryption mounting work with large disk and low RAM? @ewanm89 yeah well at this point it becomes more of a terminology issue, in a sense it does become the new block size (but I see your point). :) |
|
Aug 4 |
comment |
How does disk encryption mounting work with large disk and low RAM? @ewanm89 Threefish has a 256-bit block size variant along with 512-bit and 1024-bit ones (it is a wide block cipher since it was designed for hashing in mind, see Skein). But anyway full-disk encryption uses modes of operation which expand the cipher's block size to the size of a disk sector, so it's not really relevant. |
|
Aug 4 |
comment |
Is there an index of all md5 collisions? @Polynomial I meant SHA256 if the application is security-sensitive, the "otherwise" was a bit ambiguous, sorry. If speed was a real concern I would go for something like Skein though, but I agree that SHA-1 would be somewhat faster than SHA256 (but then I'm pretty sure a caching system would be dominated by disk latency/throughput, making speed irrelevant overall, but this is speculation). |
|
Aug 4 |
comment |
Is there an index of all md5 collisions? Also, the concept of checking against a "collision blacklist" is so anti-KISS that my eyes are bleeding. If an attacker can create one collision, he can most certainly create another, making your blacklist useless. |
|
Aug 4 |
comment |
Is there an index of all md5 collisions? If your caching system doesn't need to worry against a malicious entity trying to create collisions, then you can safely use MD5 - if it's just your program against lady luck, the probability of stumbling upon a collision is basically zero. Otherwise, I recommend SHA256. |
|
Aug 1 |
comment |
How can passwords be stolen from Yahoo? @Jim Well looking over the dump again, many cracked passwords are not what I would call weak, so I could be wrong and Yahoo did keep information about the passwords. But that would be such a gaping security failure I doubt even Yahoo is capable of it. |
|
Jul 12 |
comment |
How to destroy old credit card? @martinstoeckli Well, aggressively attacking the card with scissors decreases security of your fingers :) |
|
Jul 12 |
comment |
How to destroy old credit card? Why don't you just burn it? Put it in an ashtray with some flammable material, set it on fire and come back a few minutes later, there will be nothing left of the card. Plus, it's more exciting than cutting it with scissors... :p |
|
Jul 6 |
comment |
Can voice chat be spied? Of course it's practical, and secure if done right, but is it worth the effort? And the service needs to support it to work, and also needs a certificate otherwise an MITM is possible. |
|
Jul 1 |
comment |
Are passwords made up from concatenating a few foreign words better than shorter random characters? @chao-mu Well, not anymore, now that this passphrase is on the internet nobody can use it. Damn it, it was such a good passphrase. |
|
Apr 22 |
comment |
What are the requirements for a random number generator to a be safe to use in cryptography? @Polynomial or in general you cannot predict the next output bit with better than 0.5 probability in polynomial time even when knowing an arbitrary number of past output bits (wordy version) |
|
Apr 12 |
comment |
Encryption on the GPU, safer or not? I am using OpenCL which allows for persistent buffers, so I wouldn't have to hack my way through allocating GPU memory. Good point about DMA, I guess a computer isn't the safest place for a key to be. |
|
Apr 12 |
comment |
Encryption on the GPU, safer or not? Yes of course the reason I use GPU is for performance, but I was concerned about the security risks it entailed. |
