Reputation
23,938
Top tag
Next privilege 25,000 Rep.
Access to site analytics
Badges
6 37 88
Newest
 Nice Answer
Impact
~639k people reached

Feb
21
revised Are checksums essentially non-secure versions of cryptographic hashes?
added 37 characters in body
Feb
21
answered Are checksums essentially non-secure versions of cryptographic hashes?
Feb
18
comment Why does the FBI ask Apple for help to decrypt an iPhone?
It's important to specify whether you are talking about an iPhone with Secure Enclave (5S and newer) or without Secure Enclave (5C and older). The answer differs significantly, as there are major differences in how the crypto works.
Feb
14
awarded  Notable Question
Feb
7
awarded  Enlightened
Feb
7
awarded  Nice Answer
Jan
27
comment Is TLS secure against VM reset attacks?
@RichieFrame, as far as I know, the answer is "no": SSL was designed before these attacks were even known in the cryptographic community.
Jan
27
comment Is TLS secure against VM reset attacks?
You seem to be claiming that there are no protocol-level vulnerabilities. Can you support that claim with evidence, analysis, citations, or other reasoning? (Just because there exist some implementation-level vulnerabilities doesn't mean there are no protocol-level vulnerabilities. Put it another way, just because we know of some implementation-dependent vulnerabilities doesn't mean that there are no vulnerabilities that apply to all implementations.)
Jan
27
asked Is TLS secure against VM reset attacks?
Jan
25
awarded  Nice Answer
Jan
21
awarded  Popular Question
Jan
15
comment Are there any advantages in using proprietary encryption?
This has been covered in incredible depth over at Security. SE. See security.stackexchange.com/q/66552/971, security.stackexchange.com/q/24449/971, security.stackexchange.com/q/44094/971, security.stackexchange.com/q/2430/971, security.stackexchange.com/q/32064/971, security.stackexchange.com/a/2210/971. I'm not sure there's much purpose in repeating all of those points here...
Dec
22
comment Differences Between White-Box Cryptography and Code Obfuscation
@NeilSmithline, everything I wrote still seems valid. There have of course been new results and new developments in obfuscation since then, but nothing that invalidates my answer, as far as I know. For instance, you might enjoy reading about indistinguishability obfuscation.
Dec
17
awarded  Enlightened
Dec
17
awarded  Nice Answer
Dec
16
accepted Non-deniability of data sent over TLS
Dec
12
asked Non-deniability of data sent over TLS
Dec
8
awarded  Good Answer
Nov
20
awarded  Popular Question
Nov
2
awarded  Popular Question