33,171 reputation
566129
bio website bolet.org/~pornin
location Quebec City, Canada
age 39
visits member for 3 years, 5 months
seen Dec 14 at 14:46

Cryptographer, programmer in several languages (C, Java, several assemblies, Pascal, Forth...). I also have a life.


Jun
6
awarded  Great Question
May
25
answered Journals to read in order to keep up to date with interesting research
May
16
answered Why do “nothing up my sleeve numbers” have low entropy?
May
11
awarded  Nice Answer
May
5
awarded  Enlightened
May
5
awarded  Nice Answer
May
3
awarded  Nice Answer
May
1
answered How to argue to a paranoid that RSA is safe?
Apr
28
answered What is the MD5 collision with the smallest input values?
Apr
22
comment Use cases for CMAC vs. HMAC?
Beware: MD hash functions like SHA-1 are built out of a block cipher, but with the data as key, which apparently allows for better bandwidth. At least we can empirically notice that the SHA-3 competition yielded algorithms which are quite faster than all AES candidates on the same hardware. Even AES-based SHA-3 candidates (e.g. ECHO) turned out to be quite faster than AES itself on the same machine.
Apr
22
answered Burn after read algorythm. Software verification on compromised environment. Software smart card
Apr
22
answered “Fine grain Cross-VM Attacks on Xen and VMware are possible” and OpenSSL 0.9.7
Apr
22
answered Use cases for CMAC vs. HMAC?
Apr
22
reviewed Approve
Apr
22
reviewed Approve
Apr
19
answered Is there a reason that the N value in scrypt is limited to powers of two?
Apr
15
comment Can ECDSA signatures be safely made “deterministic”?
RFC are immutable; once published they never change.
Apr
14
awarded  Nice Answer
Apr
14
awarded  diffie-hellman
Apr
13
comment Perfect Forward Secrecy in TLS
The "RSA" in "DH-RSA" qualifies the public key of the CA which issued the server's certificate. From the point of view of the client, a "DH-RSA" cipher suite means: "I want the server to have a certificate with a DH public key, and I am ready to use RSA to validate that certificate". This was supposed to be used in case a server had several DH certificates, signed with either RSA-based or DSA-based CA: the server would then choose the certificate for which the client had relevant support. This has never worked well in practice (but everybody does RSA anyway).