428 reputation
35
bio website stackoverflow.com/users/3474
location United States
age 44
visits member for 2 years, 8 months
seen Dec 1 at 5:11

Oct
3
comment Why should one not use the same asymmetric key for encryption as they do for signing?
@user93353 Workplaces often escrow your private encryption key. That way, when they fire you, you get hit by a bus, or you abscond with the boss's daughter, they still have access to your files. Any employer that allows encrypting work product with a key they don't hold in escrow is asking for trouble.
Feb
9
comment Are salted SHA-256/512 hashes still safe if the hashes and their salts are exposed?
@ThomasPornin I didn't realize that, thanks. I will have to take a closer look at bcrypt.
Apr
26
comment Are salted SHA-256/512 hashes still safe if the hashes and their salts are exposed?
The work performed by bcrypt in key deriving a key is the same as PBKDF2, so hardware should affect both equally. You may be thinking of scrypt, which is designed to defeat memory optimization.