538 reputation
411
bio website codingrobots.com
location
age 31
visits member for 2 years, 8 months
seen Jan 10 at 10:34
Programmer and founder at Coding Robots

Aug
27
revised Can iterated key expansion in Blowfish slow down bruteforce attacks on small key sizes?
added 4 characters in body
Aug
27
revised What are the safe ways to derive HMAC key using block cipher?
added 1 characters in body
Aug
27
asked What are the safe ways to derive HMAC key using block cipher?
Aug
27
asked Can iterated key expansion in Blowfish slow down bruteforce attacks on small key sizes?
Jul
22
comment Is this a secure implementation of password reset email?
The better token would be MACk(userid || timestamp || pwdval), where pwdval is some password-related value that will change once the user resets password (for example, password hash or salt stored in the database). This method ensures that when a user changes the password, the token becomes invalid even if it hasn't expired (i.e. protects against replay attack).
Jul
22
awarded  Editor
Jul
22
revised Encryption algorithm that produces dummy output on incorrect passwords
Deleted signature
Jul
22
suggested suggested edit on Encryption algorithm that produces dummy output on incorrect passwords
Apr
6
awarded  Supporter
Jan
7
awarded  Teacher
Jan
7
answered AESManaged Trade Compliance Issue in United States