1,830 reputation
2825
bio website stackexchange.com/users/…
location Paris, France
age 34
visits member for 2 years, 8 months
seen 9 hours ago

Moderator♦ pro tempore on French Language and Usage and Computer Science. I'm also a unix amateur, and a developer with a computer science background and security leanings by trade.

Interested in embedded systems? Join the Embedded Programming and Design proposal!

Avatar picture slightly adapted from a photo by Luridiformis (Zonda Grattus) (except where I use another picture).


11h
reviewed Leave Open How can I convert numbers into prime numbers?
1d
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@e-sushi Again, no, this is not a matter of opinion. Most compilers (C compilers being one of the most common exceptions) will not produce code if they detect that the program does not match some minimal specification which includes checking that no part of the program uses uninitialized memory.
1d
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@HenrickHellström This is blatantly false: if the program passes the verification, it correctly implements the specification that is being verified. The specification may be incomplete — for example, it's very hard to specify the absence of side channels — but what is there can be proved in the right framework. (I'm not saying it's easy!) There is a wide gap (uncomputable, for starters) between implementation and specification.
1d
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@e-sushi Nonsense. This question is not asking for “absolute security”, it's asking about “bugs of the genre of Heartbleed”. It's not just “fun to discuss”, it's a serious topics that researchers work on.
1d
reviewed Leave Open Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
1d
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@mikeazo Information Security might take it; there is a recent somewhat similar, but broader question, which is gathering close votes as unclear but not as off-topic. Computer Science would take it (I'm a moderator there).
1d
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@HenrickHellström You assert that it is possible to write a correct, but unverifiable program. This is true but uninteresting. The question here is whether it is possible to write a correct and verifiable program.
1d
reviewed Close Compute in GF(2^8)
1d
reviewed Leave Open HKDF as keystream generator
1d
reviewed Leave Closed SHA256 Padding and Parsing
Apr
13
reviewed Approve suggested edit on Why do some block cipher modes of operation only use encryption while others use both encryption and decryption?
Apr
13
comment How do they implement MAC in TLS?
@CuriousSam TLS “packets” (called records in the specification) are unrelated to how the stream is broken down into TCP packets.
Apr
12
reviewed Close Open SSL signatures - merkle ecdsa rsa
Apr
12
comment Open SSL signatures - merkle ecdsa rsa
This question appears to be off-topic because it is purely about using the openssl tool.
Apr
12
reviewed Close implementing a cryptographic hash with a block cipher
Apr
12
reviewed Reviewed Showing that security of a elgamal invariant is insecure
Apr
11
reviewed Close cryptography and use of python programming language
Apr
11
reviewed Reviewed Threshold signatures vs. certificate authority+voting verification
Apr
11
reviewed Close What is the asymptotic complexity of RSA and paillier cryptosystem algorithm?
Apr
9
comment SHA256-based stream cipher
Thank you @figlesquidge . I've rescinded my close vote; the question is still too broad but at least it goes well with your answer so I guess that's ok.