13
votes
Determining Entropy in PHP
$token = md5($user_id . time());
The password reset token is supposed to be secret. However, it is derived from values that are not secret, or at least not hard to guess.
The attack scenario is as ...
9
votes
Determining Entropy in PHP
Just a few additions to Sjoerd's answer:
It doesn't matter that the result is 128 bits long (you wrote 32 bits, but you probably meant hexadecimal characters). It's also irrelevant that MD5 cannot be ...
2
votes
Accepted
How does the key distribution center (KDC) distribute the session key in symmetric ecryption?
You're mixing up different protocols.
First off, you need to understand which protocol you're even talking about. Based on your description, it's the Needham-Schroeder protocol.
Then it's important to ...
1
vote
Accepted
Decrypting base2i encryption?
Using the base 2i leads to the quater-imaginary representation of the number. This isn't any kind of encryption. At best, it might be called encoding.
Converting from base 2i to the decimal ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
cryptography × 2373encryption × 852
hash × 319
tls × 221
passwords × 209
authentication × 194
aes × 144
public-key-infrastructure × 135
rsa × 109
certificates × 104
digital-signature × 103
random × 95
key-management × 94
openssl × 74
asymmetric × 65
cryptanalysis × 65
web-application × 62
key-exchange × 56
key-generation × 52
.net × 46
salt × 46
protocols × 46
privacy × 45
ssh × 44
file-encryption × 44