133 reputation
6
bio website sussex.ac.uk/Users/mfb21
location London, United Kingdom
age
visits member for 2 years, 8 months
seen Oct 4 '13 at 14:29

Jul
6
awarded  Scholar
Jul
6
accepted Formal definition of (perfect) forward security/secrecy
Jun
30
awarded  Commentator
Jun
30
comment Formal definition of (perfect) forward security/secrecy
That's what I think too, but I was told that I needn't worry, that perfect forward security does not even allow retroactive decryption. The person who told me that was then unable to produce the relevant security definition. Whence my question here.
Jun
30
comment Formal definition of (perfect) forward security/secrecy
Legisation has a direct effect on the applicability of the threat model. For example if session key have to be stored, as I belive they would have to in the UK, then a threat-model that assumes adversaries cannot get hold of ephemeral key material would be inappropriate.
Jun
28
comment Formal definition of (perfect) forward security/secrecy
Thank you. My application is quite simple, I want to understand precisely what it means that e.g. Google is using perfectly forward secure encryption of my communications. I suspect that it does not mean much given the requirements of various legislations to store relevant meta-data.
Jun
28
asked Formal definition of (perfect) forward security/secrecy
Jun
28
awarded  Informed
Jun
13
comment Attack vectors introduced by compilers
One could argue that lazy functional languages like Haskell do something like this. Maybe also Umut Acar's languages for self-adjusting computation?
Jun
9
comment Attack vectors introduced by compilers
Interesting, thanks. Are any compilers used in practise doing memoisation?
Jun
9
awarded  Supporter
Jun
8
comment Attack vectors introduced by compilers
@jug. Thank you very much. I didn't know that smard-cards are typically hand-coded in assembler. I'm specifically interested in security vulnerabilities introduced by compilers. There must be some, given how complicated modern compilers are. BTW what do you mean by "Small optimizations of the CPU"? Do you mean optimisations the programmer introduces, or changes in the CPU?
Jun
7
comment Attack vectors introduced by compilers
@CodeInChaos I know, but that's how a lot of programming languages are specified at a high level. A lot of program verification works with such simplifications. All models are unrealistic because the abstract from some detail.
Jun
7
comment Attack vectors introduced by compilers
@jug I'm interested in all those.
Jun
7
comment Attack vectors introduced by compilers
@PaĆ­loEbermann I'd say that most forms of semantics have a notion of atomic computational step (e.g. in the $\lambda$-calculus that would be $(\lambda x.M)V \rightarrow M\{V/x\}$). I interprete these atomic steps as taking one unit of time.
Jun
7
comment Attack vectors introduced by compilers
@CodeInChaos, I have added some explanations to my question. I hope it's clearer now.
Jun
7
awarded  Editor
Jun
7
revised Attack vectors introduced by compilers
added 1334 characters in body
Jun
7
awarded  Student
Jun
6
asked Attack vectors introduced by compilers