2,537 reputation
622
bio website
location Netherlands
age 40
visits member for 2 years, 4 months
seen Apr 16 at 7:56

Java and security expert with over 10 years of experience with the language and with the practical application of cryptographic protocols - including the design of protocols within international standardization bodies. Creator of a heavily used common criteria certified product. Over 30 years of experience with computers. Likes kids, cats, reading, movies and several sports.


Dec
22
revised Is a Mersenne-twister cryptographically secure if I truncate the output?
added warning, removed bold typeface from *personal* conclusion
Dec
22
comment Brute Force on 3DES with Reduced Keyspace and Unknown IV
If you have information that is relevant to the question, then please add it to the question instead of (just) replying to the comments.
Dec
22
revised Brute Force on 3DES with Reduced Keyspace and Unknown IV
added 76 characters in body
Dec
22
comment What's the alternative should PKI collapse?
If you are looking for transport layer level security then I cannot help you with a known protocol. Almost any protocol relies at least on DH. You could adapt a smart card layer protocol for use on sockets, e.g. the AES secure channel in the ICAO SAC specifications (don't use the 3DES one as it fails with regard of the use of the IV). Or you could adapt TLS and remove the DH key exchange, creating session keys with a challenge/response protocol.
Dec
22
answered What's the alternative should PKI collapse?
Dec
12
comment File Hash of Encrypted File
@figlesquidge Don't worry about that too much, changes will be indicated to the person answering the question, and we can always roll back. Of course, you should not change the direction of the answer.
Dec
11
comment Does it make sense to block RSA keys under 1024 bits?
1024 bit key sizes have been known to be in the danger zone for much longer than last Juli. What's happening now is the enforcement instead of the recommendation to switch to larger key sizes (and to better hash algorithms as well)
Dec
11
comment Diffie-Hellman Secret Exponent Size and Shared Secret Usage
@CodesInChaos Just creating a DH API, you are certainly correct with regarding the modulus limitation above. It may be tricky to find static parameters for such keys however. ECDH should certainly be preferred for these kind of requirements. Amended answer.
Dec
11
revised Diffie-Hellman Secret Exponent Size and Shared Secret Usage
added 606 characters in body
Dec
10
comment Could someone reuse client certificates?
I think steelbytes is indeed referring not to compromise of the server key / certificate but to that of another client as in the answer of Syrian. I don't think it is very clear in the question either, and your answer is as valid for that scenario as well. (sorry for the bad sentence, I'm not fully awake)
Dec
2
reviewed Approve suggested edit on Is this encryption scheme perfectly secure?
Dec
2
revised Purpose of leading zero in PKCS1-v1_5 padding
deleted 4 characters in body
Dec
1
comment PBKDF2WithHmacSHA512 Vs. PBKDF2WithHmacSHA1
Both issues are Fixed in above answer, thanks go to Ricky.
Dec
1
answered Publicly exposed hash of private key
Nov
29
awarded  Yearling
Nov
29
comment How good is the RandomPool generator in Crypto++ library?
It looks like RandomPool is an interface, not a full blown implementation, so there is no answering that question. You can ask how secure AutoSeededRandomPool is, but that depends directly on the operating system. In the end, for a pure library that does not do IO itself, there is no way to seed without some support of the operating system or the CPU.
Nov
29
comment How good is the RandomPool generator in Crypto++ library?
"This reference manual is a work in progress. Some classes are still lacking detailed descriptions." Why is it that - in general - cryptographic libs seem to be ignoring even the most basic software engineering practices... sigh.
Nov
29
comment Reusing PGP key when generating SSL Certificate Authority?
Interesting, did not know about that product. But I would take their security claims with a grain of salt
Nov
29
comment How can user privacy be preserved in certificateless cryptography?
Does this still represent your questions well?
Nov
29
revised How can user privacy be preserved in certificateless cryptography?
formatting