Reputation
Top tag
Next privilege 250 Rep.
View close votes
Badges
1 6
Impact
~8k people reached

  • 0 posts edited
  • 0 helpful flags
  • 9 votes cast
Aug
14
comment Why don't we use bcrypt and scrypt together?
One minor nit-pick: bcrypt is not a key-derivation function. You cannot use bcrypt to, for example, generate 256 bits of key material. bcrypt always outputs 24-bytes (the result of encrypting OrpheanBeholderScryDoubt with Blowfish encryption). Scrypt on the other hand is a (password based) key derivation function; which people have used for password storage.
Apr
28
comment Questions about BCrypt and PBKDF2
@user23369 Scrypt for Delphi
Oct
28
comment Why, or when, to use an Initialization Vector?
Is there any attack to be had in my example; where i leave the IV always at zero?
Oct
28
comment Why, or when, to use an Initialization Vector?
@PaĆ­loEbermann In that case it would be whatever the "default" is; which is documented to be all zero's. But if AES doesn't support an IV, then i guess my IV is "undefined".
May
13
comment Is it fair to assume that SHA1 collisions won't occur on a set of <100k strings
@owlstead "Is it fair to assume that SHA1 collisions won't occur on a set of <100k strings" Yes, it is fair to assume that SHA1 collisions won't occur on a set of <100k strings.
May
12
comment Time Capsule cryptography?
The downside of having a time capsule that you don't want opened until 20 years from now: is that you must spend 18 years encrypting the puzzle. Considering Moore's law it will then take 2 years for the public to decrypt it. Total: 20 years.