2,552 reputation
622
bio website
location Netherlands
age 40
visits member for 2 years, 4 months
seen 12 hours ago

Java and security expert with over 10 years of experience with the language and with the practical application of cryptographic protocols - including the design of protocols within international standardization bodies. Creator of a heavily used common criteria certified product. Over 30 years of experience with computers. Likes kids, cats, reading, movies and several sports.


Dec
1
answered Publicly exposed hash of private key
Nov
29
awarded  Yearling
Nov
29
comment How good is the RandomPool generator in Crypto++ library?
It looks like RandomPool is an interface, not a full blown implementation, so there is no answering that question. You can ask how secure AutoSeededRandomPool is, but that depends directly on the operating system. In the end, for a pure library that does not do IO itself, there is no way to seed without some support of the operating system or the CPU.
Nov
29
comment How good is the RandomPool generator in Crypto++ library?
"This reference manual is a work in progress. Some classes are still lacking detailed descriptions." Why is it that - in general - cryptographic libs seem to be ignoring even the most basic software engineering practices... sigh.
Nov
29
comment Reusing PGP key when generating SSL Certificate Authority?
Interesting, did not know about that product. But I would take their security claims with a grain of salt
Nov
29
comment How can user privacy be preserved in certificateless cryptography?
Does this still represent your questions well?
Nov
29
revised How can user privacy be preserved in certificateless cryptography?
formatting
Nov
29
comment Why does plain RSA not work with big messages ($m>n$)?
I don't think this answer is complete without mentioning v1.5 and OAEP padding. The padding is required to create a secure RSA encryption algorithm ("raw" encryption of the value 0 or 1 is not going to end well, to name just the obvious ones).
Nov
28
reviewed Approve suggested edit on
Nov
28
reviewed Approve suggested edit on
Nov
28
revised Convert a number to sha-1
added part about rainbow tables after a comment from Codes
Nov
28
comment Convert a number to sha-1
@CodesInChaos Actually, I think we are not the same page, so I'll edit the rainbow table comment into the answer and delete some comments, otherwise we'll run out of the page :)
Nov
28
comment Convert a number to sha-1
@CodesInChaos True, but you would of course still need the same amount of calculations to build the rainbow table. We are are looking for a 1:1 pair, not a collission. Or am I missing something?
Nov
27
comment security of Felix cipher
Yes, but is it secure? :P
Nov
27
answered Reusing PGP key when generating SSL Certificate Authority?
Nov
27
comment What operations are used in symmetric cryptography and why?
@Gilles OK, I'm not particularly interested in closing questions if they are of use to anybody. If anything, I think the stackexchange off-topic thingy is a bit too strict. So if you think the question / answer is useful enough then I'm not against keeping it open. Retracted close, removed comment.
Nov
27
comment KCV and compatibility with block cipher modes of operation
Yeah, but it would be relatively easy to find an algorithm that does not have the drawback of encrypting an often used block of data...
Nov
27
comment Convert a number to sha-1
About that last sentence: only if you know the hash to be over the data of course.
Nov
27
comment scrypt and bcrypt for benefits of both?
Interesting question, even though I think the answer is a clear NO :)
Nov
27
answered Convert a number to sha-1