Reputation
5,701
Next tag badge:
64/100 score
17/20 answers
Badges
1 11 33
Newest
 Custodian
Impact
~109k people reached

May
9
comment Difference between “Signature Algorithm” and “Signature Hash Algorithm” in X.509
RSASSA-PSS is a completely different beast altogether. A correct representation would require not only Signature Algorithm and Signature Hash Algorithm, but also identifiers for MGF Algorithm and P Source. This is however beside the point.
Mar
9
comment Will SHA1 or Other Hash Functions Ever Contain Quotes
I'm voting to close this question as off-topic because this is an apples and oranges kind of question. SHA-1 will output a string of 160 bits. A quote character is a character and not a bit. Your question will only make sense, if there is an implied conversion algorithm from the bit string output of SHA-1, to the character string you store in your database. This conversion algorithm might be chosen independently of the hash algorithm. Hence, your question is off-topic.
Feb
17
comment How many attempts does it take to crack a 32-bit password hash with this scenario?
Could you explain, in pseudo-code, exactly what you mean by "attempts" in the context of "matching a 32-bit hash from 4 million hashes". Finding a value that is known to exist in a list of 4 million values, depends on whether the list is already sorted or not, and does not depend of what kind of values are in the list or how they were generated.
Feb
16
comment ECC considered secure in OpenSSL?
The term "safe curve" seems to be used by Bernstein for curves that meet certain criteria, selected to make it easy to ensure that simple implementations are secure implementations. This doesn't imply that "non-simple" implementations using other curves are not secure. Hence, the information provided on the page is insufficient to infer anything about the security of OpenSSL, although it does raise some flags.
Jan
7
comment Do I have to transfer the private key to digitally sign a remote document?
If anything is preventing you from transmitting the unsigned pdf back to the client for signing, I am afraid the problem is with your requirements. You will either need some basic pdf parser client side, or you will have to let the server sign the document using a certificate that is not issued for the client. You can't have it both ways.
Dec
30
comment Do I have to transfer the private key to digitally sign a remote document?
Transfer the preliminary pdf to the client, let the client sign it and upload it back to the server. Alternatively, let the server sign it with a key corresponding to a certificate that belongs to the service rather than the user.
Dec
29
comment Do I have to transfer the private key to digitally sign a remote document?
What exactly does "DSC" mean in this context?
Dec
26
comment Prime Numbers in Discrete Log
You have chosen the tag "dsa", but there is no mention of digital signatures in your question. Do you need primes for Diffie-Hellman or for a signature scheme?
Dec
26
comment Which Block cipher mode should I use?
Define "secure".
Dec
15
comment What is difference between PRG, PRF, and PRP
Well, a poly-time observer has a relatively realistically good shot at distinguishing a few TB of a AES-CTR stream from a HMAC-MD5-stream, but not at distinguishing AES with a random key from a random permutation.
Nov
17
comment Key generation in Digital Signature Algorithm
The exact algorithm for generating the primes is specified in the DSS NIST FIPS 186-4 nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf
Nov
15
comment Why we can't implement AES 512 key size?
"since AES-128 is safe enough for anything foreseeable" ...except when the cryptosystem is re-keying sufficiently frequently for collisions in the key space to become a concern.
Oct
3
comment What does OIW stand for
books.google.se/…
Oct
3
comment What does OIW stand for
Open System Implementors Workshop alvestrand.no/objectid/1.3.14.html
Sep
23
comment Is it possible to find out whether a number is greater than another number without knowing the numbers?
Do you need to compare each number in a pair only once, or multiple times?
Sep
22
comment Is it possible to hand-negotiate an SSL/TLS session?
No, it is not feasible or even theoretically possible to connect to a server on 443 and type yourself through an entire SSL handshake.
Sep
15
comment What is the technical name for a public key container in DER format?
If it's not a plain PKCS#1 RSAPublicKey, it is probably a SubjectPublicKeyInfo from PKIX/X.509
Sep
15
comment What is the technical name for a public key container in DER format?
Well, you don't have to take my word for it. All you have to do is to implement a Base64 decoder, an ASN.1 parser, a DER parser and see for yourself, just like I did. :)
Sep
15
comment What is the technical name for a public key container in DER format?
The format is PKCS#1 with PEM encoding. Your question is however off topic here.
Sep
15
comment Why would an RSA library tell me that the public key must be at least 512 bits in size?
Obviously, you can't use a 512 bit RSA key for generating sha512withRSAEncryption signatures. The restriction on key size might have to with more than just best practices.