139 reputation
8
bio website none.seriously
location Switzerland
age 30
visits member for 2 years, 2 months
seen Aug 12 at 13:15

Physicist.


Feb
16
asked Is there a method to combine encryption and ring signing?
Dec
5
comment At the current time, is SHA256 the de facto standard for strong cryptographic hashes?
Question about the previous comment: “Weaknesses” in SHA-256d?
Sep
15
awarded  Informed
Sep
11
awarded  Excavator
Sep
11
revised How do you find a cheater in Shamir Secret Sharing?
fixed logic
Sep
11
accepted Is a continuous stream of encrypted data embedded in garbage more or less secure than only encrypting the data?
Sep
11
comment Should we sign-then-encrypt, or encrypt-then-sign?
The more general statement to make (e.g. from your short answer) is "don't sign anything that doesn't provide enough context"
Sep
11
suggested suggested edit on How do you find a cheater in Shamir Secret Sharing?
Aug
14
comment What is the actual difference between security through obscurity and true encryption?
@mikeazo I was so hoping there was an xkcd for this :-D
Aug
14
comment What is the actual difference between security through obscurity and true encryption?
Very good point. A former employee decreased inbound traffic a lot by simply remapping the (needed) SSH ports... I guess you agree with my comment then :-7 Of course an obscured system will be considered a more interesting challenge to the potentially more harmful intruders. Well, that's what honeypots are for...
Aug
14
comment What is the actual difference between security through obscurity and true encryption?
Here's a nice quote from that linked SO question: If someone discovers the password, you can change the password, which is easy. If someone finds the location, you need to dig up the money and move it somewhere else, which is much more work. And if you use security by obscurity in a program, you would have to re-write the program... – Thomas Padron-McCarthy Feb 11 '09 at 15:27
Aug
14
accepted What is the actual difference between security through obscurity and true encryption?
Aug
14
comment What is the actual difference between security through obscurity and true encryption?
Ah, I forgot about equal probability. That's probably the most important difference, locations to hide a letter would probably be biased by physical reachability (or its inverse).
Aug
14
comment What is the actual difference between security through obscurity and true encryption?
@mikeazo thanks for these links, nice reading. I guess when crypto get out of beta that SO question should be migrated here...
Aug
14
awarded  Editor
Aug
14
comment What is the actual difference between security through obscurity and true encryption?
I think I get your point, but isn't hiding the letter the method and its location the key? And the keyspace can be quite huge if I have recently booked an around the world trip... But yes, this is not exactly encryption, since decryption requires the recipient to travel instead of simply entering a key...
Aug
14
revised What is the actual difference between security through obscurity and true encryption?
added wikipedia link to the Lorenz machine
Aug
14
suggested suggested edit on What is the actual difference between security through obscurity and true encryption?
Aug
14
comment What is the actual difference between security through obscurity and true encryption?
Re "Everything should be made public", shouldn't that rather read "Everything becoming public should not compromise the actual encryption"? With that I mean for example a primitive rot-13-ing of an RSA encrypted message should not be considered safer than RSA alone, but it would at least keep script kiddies with a brute force cracker out for a while since they would have to find and use their brains first. And reducing the amount of potential attackers is not so bad, as is in some scenarios increasing the shortest possible attack duration
Aug
14
awarded  Commentator