662 reputation
418
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 3 years, 2 months
seen Aug 16 at 12:40

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile


Jul
22
asked How can I tell which curve a given ECDSA implementation uses? (P-521 or something else)
Jul
4
comment Given a message and signature, find a public key that makes the signature valid
Note: If you didn't intend to make this "community wiki" you can flag this for a moderator to undo that... and you can continue to gain reputation for the posting.
Jul
3
accepted Why is “mod(n)” so central to most aspects of cryptography?
Jul
3
comment Why is “mod(n)” so central to most aspects of cryptography?
In an OTP, XOR was explained to me as having a 50% chance of being 1 or 0, resulting in an output with perfect secrecy (up the the limits of the PRG). Is it true that any modulo done in base 10 has a 10% chance of being a given number? If the answer is yes, then I am totally on board.
Jul
1
comment Why is “mod(n)” so central to most aspects of cryptography?
Here is the official take on duplicate questions on this site Where this particular question falls I'm open to whatever is decided.
Jun
30
asked Why is “mod(n)” so central to most aspects of cryptography?
Jun
29
accepted What type of groups does Microsoft's U-Prove use (Schnorr… etc?)
Jun
29
asked What type of groups does Microsoft's U-Prove use (Schnorr… etc?)
Jun
28
awarded  Informed
Jun
17
accepted When truncating an AES MAC value by “w” , how do I justify that “w” is still negligible?
May
22
accepted How much data can I encrypt with AES before I need to change the key in CBC mode?
May
22
comment How much data can I encrypt with AES before I need to change the key in CBC mode?
Part 2 - Could this "risk" be explained to management as the quantity of brute force attempts that we will tolerate? (substitute brute force for X chosen message attacks etc) and 2^64 is the minimum required due diligence?
May
22
comment How much data can I encrypt with AES before I need to change the key in CBC mode?
Part 1 - Could this number (1/2^32) be compared to a Birthday Attack, where the distribution is non-uniform? Namely, where there there is tipping point of where 0.. to some negligible number increases rapidly to a non-negligible number?
May
21
revised How much data can I encrypt with AES before I need to change the key in CBC mode?
added 6 characters in body
May
21
comment How much data can I encrypt with AES before I need to change the key in CBC mode?
@curious Yes, they are from his coursera course. It's really good and packed full of information. I discovered this 2 weeks ago and am trying to finish all the classes in 1 month so I can start the next one on time.
May
21
revised How much data can I encrypt with AES before I need to change the key in CBC mode?
added 35 characters in body
May
21
revised How much data can I encrypt with AES before I need to change the key in CBC mode?
added 177 characters in body
May
21
asked How much data can I encrypt with AES before I need to change the key in CBC mode?
May
21
awarded  Popular Question
May
18
comment Generating IV in TLS 1.2
I'd be curious to see your C# implementation. Do share a link if you can.