631 reputation
317
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 2 years, 8 months
seen 2 days ago

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile


Jul
3
comment Why is “mod(n)” so central to most aspects of cryptography?
In an OTP, XOR was explained to me as having a 50% chance of being 1 or 0, resulting in an output with perfect secrecy (up the the limits of the PRG). Is it true that any modulo done in base 10 has a 10% chance of being a given number? If the answer is yes, then I am totally on board.
Jul
1
comment Why is “mod(n)” so central to most aspects of cryptography?
Here is the official take on duplicate questions on this site Where this particular question falls I'm open to whatever is decided.
Jun
30
asked Why is “mod(n)” so central to most aspects of cryptography?
Jun
29
accepted What type of groups does Microsoft's U-Prove use (Schnorr… etc?)
Jun
29
asked What type of groups does Microsoft's U-Prove use (Schnorr… etc?)
Jun
28
awarded  Informed
Jun
17
accepted When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
May
22
accepted How much data can I encrypt with AES before I need to change the key in CBC mode?
May
22
comment How much data can I encrypt with AES before I need to change the key in CBC mode?
Part 2 - Could this "risk" be explained to management as the quantity of brute force attempts that we will tolerate? (substitute brute force for X chosen message attacks etc) and 2^64 is the minimum required due diligence?
May
22
comment How much data can I encrypt with AES before I need to change the key in CBC mode?
Part 1 - Could this number (1/2^32) be compared to a Birthday Attack, where the distribution is non-uniform? Namely, where there there is tipping point of where 0.. to some negligible number increases rapidly to a non-negligible number?
May
21
revised How much data can I encrypt with AES before I need to change the key in CBC mode?
added 6 characters in body
May
21
comment How much data can I encrypt with AES before I need to change the key in CBC mode?
@curious Yes, they are from his coursera course. It's really good and packed full of information. I discovered this 2 weeks ago and am trying to finish all the classes in 1 month so I can start the next one on time.
May
21
revised How much data can I encrypt with AES before I need to change the key in CBC mode?
added 35 characters in body
May
21
revised How much data can I encrypt with AES before I need to change the key in CBC mode?
added 177 characters in body
May
21
asked How much data can I encrypt with AES before I need to change the key in CBC mode?
May
21
awarded  Popular Question
May
18
comment Generating IV in TLS 1.2
I'd be curious to see your C# implementation. Do share a link if you can.
May
18
comment When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
I learned something new today en.wikipedia.org/wiki/Asymptotic_security
May
17
comment When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
Is it correct for me to think/say "negligible in terms of brute forcing". Does negligible apply to any other attack other than brute forcing?
May
17
asked When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?