user avatar
user avatar
user avatar
CodesInChaos
  • Member for 10 years, 11 months
  • Last seen this week
123 votes
Accepted

Is MD5 considered insecure?

87 votes
Accepted

What is ECDHE-RSA?

81 votes
Accepted

What is the difference between a Hash Function and a Cryptographic Hash Function?

55 votes
Accepted

How do I secure my REST API?

46 votes
Accepted

Why can't I use the same key for encryption and MAC?

33 votes

Should AES always give the same output?

23 votes
Accepted

What is the difference between "key length" and "bit strength"?

20 votes
Accepted

Content hashes to help protect resources being fetched from a CDN

18 votes
Accepted

What's this kind of authentication scheme called?

17 votes
Accepted

Generate cryptographically strong pseudorandom numbers in Javascript?

17 votes

Online Government Elections System - Is it possible?

15 votes

How expensive is it to guess a 15 character password, and should I be worried?

15 votes
Accepted

Encrypting using AES 256, do I need IV?

15 votes

Whats the point in having software's like Veracrypt, which end of the day needs password to decrypt?

15 votes
Accepted

RSA key length vs. Shor's algorithm

14 votes
Accepted

Is this code snippet good enough for password hash and salt

14 votes

Demystifying Web Authentication (Stateless Session Cookies)

13 votes

How is "<scrscriptipt>" or "selselectect" used to avoid filtering?

13 votes
Accepted

“Official statement” on php.net : CRYPT_BLOWFISH is strongest hash algorithm. Why?

13 votes
Accepted

Is one CSRF token per session is adequate with HTTPS?

13 votes

How is something as simple as a keylogger detected on a computer?

12 votes

A Different Approach to PKI

12 votes
Accepted

What are the disadvantages of Tor?

11 votes
Accepted

How long it will take to crack a RAR password?

11 votes

Should I change the private key when renewing a certificate?

11 votes

Is it safe to store the database password in a PHP file?

10 votes

If I include a Forgot Password service, then what's the point of using a password?

10 votes
Accepted

Why is the Samy Worm considered XSS?

10 votes

Is there any particular reason to use Diffie-Hellman over RSA for key exchange?

10 votes

How bad it is to install another company's root certificate to your server?