375 reputation
19
bio website
location
age
visits member for 2 years, 3 months
seen Oct 1 '13 at 2:41

Aug
28
awarded  Citizen Patrol
Jul
16
comment Technical feasibility of decrypting https by replacing the computer's PRNG
Don't think that's correct. The client sends a hello 24 byte random nonce, server responds with an encrypted random nonce and you take the hmac of that with some random string if memory serves. It's actually to avoid an attack where you had one bad prng and one good one.
Jul
16
comment Technical feasibility of decrypting https by replacing the computer's PRNG
Don't you need the states of both the server and the client in order to figure out the ssl state key? If either are unknown shouldn't the tunnel be safe for the transport?
Jun
25
awarded  Custodian
Jun
25
reviewed Satisfactory Is Base64(SHA1(GUID)) still unique like the original GUID?
Jun
25
reviewed Satisfactory Attacking AES/CCM with random IV
Jun
25
reviewed Excellent Increased CRC collision probability when adding bits to input message
Jun
25
reviewed Satisfactory Injecting salt into PyCrypto KDF - useful?
Jan
11
awarded  Yearling
Apr
9
revised Diffie hellman key exchange on elliptic curve over an extension field
His english and grammar were bad. I cleaned up what I believe him to be asking for, and telling people it's homeork.
Apr
9
suggested suggested edit on Diffie hellman key exchange on elliptic curve over an extension field
Apr
8
comment My custom handshake
I apologize i read it as the signature is the hash of those items not the signature is Sign(H(K1||Time||SPub)). And the whole world can know your public key that doesn't really help them.
Apr
8
answered My custom handshake
Apr
4
awarded  Editor
Apr
4
revised Symmetric vs. Asymmetric cryptographic approaches to data security
Corrected some grammar mostly a missing t that was bothering me
Apr
4
suggested suggested edit on Symmetric vs. Asymmetric cryptographic approaches to data security
Mar
30
comment RC4 : Keystream reconstruction?
What challenge is this from?
Mar
8
answered Does a public key absolutely need to be used to initiate an encrypted session?
Mar
5
awarded  Critic
Feb
21
answered Rijndael vs. Serpent vs. Twofish: General comparison