Reputation
488
Top tag
Next privilege 500 Rep.
Access review queues
Badges
3 5
Newest
 Yearling
Impact
~24k people reached

Oct
3
comment Why should one not use the same asymmetric key for encryption as they do for signing?
@user93353 Workplaces often escrow your private encryption key. That way, when they fire you, you get hit by a bus, or you abscond with the boss's daughter, they still have access to your files. Any employer that allows encrypting work product with a key they don't hold in escrow is asking for trouble.
Feb
9
comment Are salted SHA-256/512 hashes still safe if the hashes and their salts are exposed?
@ThomasPornin I didn't realize that, thanks. I will have to take a closer look at bcrypt.
Apr
26
comment Are salted SHA-256/512 hashes still safe if the hashes and their salts are exposed?
The work performed by bcrypt in key deriving a key is the same as PBKDF2, so hardware should affect both equally. You may be thinking of scrypt, which is designed to defeat memory optimization.