2,457 reputation
21134
bio website stackexchange.com/users/…
location
age
visits member for 3 years, 4 months
seen 12 hours ago

Moderator♦ pro tempore on French Language, Computer Science and Software Recommendations. I'm also a unix amateur, and a developer with a computer science background and security leanings by trade.

Interested in embedded systems? Join the Embedded Programming and Design proposal!

Programmeurs francophones : participez à Stack Overflow en français.

Avatar picture slightly adapted from a photo by Luridiformis (Zonda Grattus).


Dec
5
comment Will X9.31 remain a secure & acceptable deterministic random generator beyond 2015?
@william_fr Reseeding (at a sufficient rate) from /dev/urandom would be enough to provide backtracking resistance, since /dev/urandom has backtracking resistance.
Dec
5
comment Will X9.31 remain a secure & acceptable deterministic random generator beyond 2015?
@william_fr I'm not familiar with Botan. From reading the manual, I gather that it periodically mixes in entropy. Mixing entropy into the RNG state makes backtracking harder, so if this happens at a sufficient rate, you have backtracking resistance. I can't tell from reading the manual how fast that happens or what entropy sources are used; that would determine how many recently-generated keys are compromised if your server is compromised at some point.
Dec
5
revised Roots in modulo field
deleted 84 characters in body; edited title
Dec
5
comment Will X9.31 remain a secure & acceptable deterministic random generator beyond 2015?
Do you consider the lack of backtracking resistance to be a concern?
Dec
5
answered Will X9.31 remain a secure & acceptable deterministic random generator beyond 2015?
Nov
30
reviewed Close Meaning of Multiplicative Group to the power n i.e. Z^n
Nov
30
reviewed Leave Open Issue about randomness : what if random looks “human” ?
Nov
30
reviewed Leave Open Is the Vigenère Cryptosystem malleable?
Nov
30
reviewed Leave Open Does SHA-1 hash have quasi commutative property?
Nov
30
reviewed Close Encrypt algorithm
Nov
30
reviewed Close What is the difference between order of base point and curve order in EC?
Nov
30
reviewed Close Minimum number of independent trials needed to detect a bias
Nov
30
reviewed Leave Open How Brittle Are LCG-Cracking Techniques?
Nov
30
reviewed Edit and Reopen Cracking RSA with Small exponent 5
Nov
30
revised Cracking RSA with Small exponent 5
deleted 239 characters in body
Nov
30
reviewed Reject Corporate PKI - SHA1 deprecation
Nov
29
reviewed Approve rc2 tag wiki excerpt
Nov
29
reviewed Approve rc2 tag wiki
Nov
27
reviewed Edit Meaning of Multiplicative Group to the power n i.e. Z^n
Nov
27
revised Meaning of Multiplicative Group to the power n i.e. Z^n
reworded and included a proper formula