Reputation
1,222
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
9 28
Impact
~40k people reached

Feb
23
awarded  Notable Question
Feb
19
awarded  Notable Question
Jan
10
awarded  Self-Learner
Jan
8
answered What is PCT_SSL_CIPHER_TYPE_1ST_HALF?
Jan
8
asked What is PCT_SSL_CIPHER_TYPE_1ST_HALF?
Dec
5
awarded  Notable Question
Nov
23
awarded  Yearling
Nov
1
awarded  Notable Question
Oct
21
comment AMD and RDRAND instruction
Intel's HRNG is described in these slides (PDF). You may also be interested in AMD clRNG, which is AMD's OpenCL-based PRNG.
Oct
21
answered Output of using the same key in all 3 boxes of 3DES
Sep
2
comment POODLE attack on TLS 1.2
@dave_thompson_085 This was mentioned in the answer: "The normal recommendation for POODLE where SSLv3.0 cannot be disabled entirely is to implement TLS_FALLBACK_SCSV support"
Sep
1
comment POODLE attack on TLS 1.2
@HenrickHellström True. I can't remember specifically, but I believe that most practical SSLv3.0 implementations use a single padding length byte at the end, fill the rest with zeros or random data, and don't validate the padding data on receipt. But that's not to say that an implementation couldn't validate padding - it just wouldn't work with most implementations.
Sep
1
answered POODLE attack on TLS 1.2
Sep
1
asked What is the impact of a server not fully verifying the data in the Client Finished packet of a TLS connection?
Aug
13
awarded  Popular Question
Jul
6
comment What is the complexity for attacking 3DES in linear or differential cryptanalysis?
@dave_thompson_085 Fixed the 2^64 error - thanks for spotting that. I left the peta/pebi change out because personally I think it's a bit of a silly distinction, fueled by manufacturers who want to get away with selling smaller drives than what the customer expected from the advertising. But that's a discussion for a different venue ;)
Jul
6
revised What is the complexity for attacking 3DES in linear or differential cryptanalysis?
Fixed 2^64 mistake.
Jul
3
answered What is the complexity for attacking 3DES in linear or differential cryptanalysis?
Jul
3
comment Reasons for components of AES
I quite like the terms "confusion and diffusion". Confusion describes taking some quantum of information (e.g. a byte) and turning it into something else, and diffusion describes taking some information and rearranging it so that the information is randomly spread about.
Jun
5
comment Why does anyone use elliptic curves for a CSPRNG?
@SOJPM AES-CTR was just an example - the point I was trying to make is that there other CSPRNG designs out there that don't have the "magic number" problem. That being said, your "provably secure" comment intrigues me - do you have a reference for a proof? I guess the proof relies upon the discrete log problem being known hard?