1,834 reputation
2825
bio website stackexchange.com/users/…
location Paris, France
age 34
visits member for 2 years, 8 months
seen 3 hours ago

Moderator♦ pro tempore on French Language and Usage and Computer Science. I'm also a unix amateur, and a developer with a computer science background and security leanings by trade.

Interested in embedded systems? Join the Embedded Programming and Design proposal!

Avatar picture slightly adapted from a photo by Luridiformis (Zonda Grattus) (except where I use another picture).


Apr
20
reviewed Leave Open What are some approaches to attack an triple key polyalphabetic cipher when the IV key and PT key are known?
Apr
19
reviewed Leave Open What does it mean when two encrypted files, encrypted with the same method but with different keys, when xor'd together, produce a repeating pattern?
Apr
19
reviewed Reviewed Cryptographic library quality
Apr
19
comment Decrypting a small Message using RSA with a Private Key
While this link may answer the question, it is better to include the essential parts of the answer here and provide the link for reference. Link-only answers can become invalid if the linked page changes.
Apr
17
reviewed Close mathematical derivation for elliptic curve cryptography
Apr
16
reviewed Leave Open How can I convert numbers into prime numbers?
Apr
15
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@e-sushi Again, no, this is not a matter of opinion. Most compilers (C compilers being one of the most common exceptions) will not produce code if they detect that the program does not match some minimal specification which includes checking that no part of the program uses uninitialized memory.
Apr
15
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@HenrickHellström This is blatantly false: if the program passes the verification, it correctly implements the specification that is being verified. The specification may be incomplete — for example, it's very hard to specify the absence of side channels — but what is there can be proved in the right framework. (I'm not saying it's easy!) There is a wide gap (uncomputable, for starters) between implementation and specification.
Apr
15
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@e-sushi Nonsense. This question is not asking for “absolute security”, it's asking about “bugs of the genre of Heartbleed”. It's not just “fun to discuss”, it's a serious topics that researchers work on.
Apr
15
reviewed Leave Open Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
Apr
15
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@mikeazo Information Security might take it; there is a recent somewhat similar, but broader question, which is gathering close votes as unclear but not as off-topic. Computer Science would take it (I'm a moderator there).
Apr
15
comment Could program verification techniques prevent bugs of the genre of Heartbleed from occurring?
@HenrickHellström You assert that it is possible to write a correct, but unverifiable program. This is true but uninteresting. The question here is whether it is possible to write a correct and verifiable program.
Apr
15
reviewed Close Compute in GF(2^8)
Apr
15
reviewed Leave Open HKDF as keystream generator
Apr
15
reviewed Leave Closed SHA256 Padding and Parsing
Apr
13
reviewed Approve suggested edit on Why do some block cipher modes of operation only use encryption while others use both encryption and decryption?
Apr
13
comment How do they implement MAC in TLS?
@CuriousSam TLS “packets” (called records in the specification) are unrelated to how the stream is broken down into TCP packets.
Apr
12
reviewed Close implementing a cryptographic hash with a block cipher
Apr
12
reviewed Reviewed Showing that security of a elgamal invariant is insecure
Apr
11
reviewed Close cryptography and use of python programming language