149 reputation
5
bio website
location
age
visits member for 9 months
seen Dec 10 at 14:47

Dec
8
awarded  Commentator
Dec
8
comment What is the functional role of CKY-I and CKY-R in ISAKMP (IKEv1)?
@e-sushi thanks for the edits, looks much better now.
Dec
8
comment What is the functional role of CKY-I and CKY-R in ISAKMP (IKEv1)?
Awesome, thanks for your answer Poncho! That clears that up for me!
Dec
8
accepted What is the functional role of CKY-I and CKY-R in ISAKMP (IKEv1)?
Dec
5
asked What is the functional role of CKY-I and CKY-R in ISAKMP (IKEv1)?
Dec
2
comment SHA1 - SSL/TLS Cipher Suite
There is also some good information about this in this question: crypto.stackexchange.com/questions/19286/…
Sep
25
awarded  Supporter
Sep
25
accepted SHA1 no longer considered secure for SSL Certificates — what about Cipher Suites?
Sep
25
comment SHA1 no longer considered secure for SSL Certificates — what about Cipher Suites?
Ahh yea. This morning I woke up thinking about this question and I realized I had the order wrong with TLS/SSL, I was studying IPsec and I had the orders confused between the two. Either way, I think you're answer (@dave_thompson_085) and @otus 's edit clarified things for me. Thanks for your help!
Sep
24
comment SHA1 no longer considered secure for SSL Certificates — what about Cipher Suites?
Interesting. Let me make sure I understand. SHA1/MD5 to sign SSL Certificates is not secure because an attacker knows the starting text (is Plaintext still the appropriate term?) that generated a particular digest. Whereas with SSL/TLS (3.0+), since the starting text is encrypted HTTP data, it isn't known and therefore finding a collision against the HMAC Digest in the packet is much, much more difficult? If that is the case, since SSL/TLS does Encryption and then HMAC'ing, isn't the "starting text" simply the cipher text in the application data record, and therefore already known?
Sep
24
comment SHA1 no longer considered secure for SSL Certificates — what about Cipher Suites?
To be honest, I don't think I had ever realized. I updated my post to include the correct usage "imminently", rather than immanent. Thanks for the heads up, hobbs.
Sep
24
revised SHA1 no longer considered secure for SSL Certificates — what about Cipher Suites?
Fixed grammar, thanks Hobbs!
Sep
23
asked SHA1 no longer considered secure for SSL Certificates — what about Cipher Suites?
Apr
3
revised TLS Key Block calculation - What is a PRF?
Edited title to better reflect the right answer to make it easier for others to search for the same content.
Apr
3
awarded  Student
Apr
2
comment TLS Key Block calculation - What is a PRF?
I see. Thanks for the explanation. So a PRF is similar to a Hash, in that it takes input values and produces a "representative" sample of those values, except that a PRF can produce an arbitrary length result. If two people have the same starting data, and use the same hash function within the PRF, and are trying to acquire the same length data, they will always end up with the same final value. (correct me if I'm wrong).
Apr
2
accepted TLS Key Block calculation - What is a PRF?
Apr
2
asked TLS Key Block calculation - What is a PRF?
Apr
1
awarded  Editor
Mar
31
awarded  Scholar