Reputation
Top tag
Next privilege 250 Rep.
View close votes
Badges
12
Newest
 Caucus
Impact
~8k people reached

  • 0 posts edited
  • 0 helpful flags
  • 14 votes cast
Jun
25
comment Why is HMAC-SHA1 still considered secure?
@StephenTouset - yeah I got that. However, is there any usage of SHA-1 from which you should run away rather than move away or walk away.
Jun
25
comment Dan Boneh's Cryptography lecture - problem with 802.11b
Note that the problem with WEP was that they reused the input (i.e. the seed) to the PRG, it was not because the output cycled around! - yes I did understand that. However, I didn't know that PRGs didn't cycle. Thank you
Jun
25
comment Why is HMAC-SHA1 still considered secure?
@RickyDemer - Thank you
Jun
25
comment Why is HMAC-SHA1 still considered secure?
@RickyDemer - So is there any application of SHA1 where it is not secure?
Jun
25
comment Why is HMAC-SHA1 still considered secure?
@CodesInChaos - you say that HMAC-SHA1 is a problem only if the key is known. But if the key is known, that will be a problem for any HMAC-hash operation, right?
Jun
25
comment Why is HMAC-SHA1 still considered secure?
If the key is known to the attacker, then even SHA2 will be a problem, right?
Jun
25
comment Why is HMAC-SHA1 still considered secure?
So when should SHA1 not be used? i.e. discovery of the issue in SHA1 precludes it from use where?
Jun
25
comment Why is HMAC-SHA1 still considered secure?
So when should SHA1 not be used? i.e. discovery of the issue in SHA1 precludes it from use where?
Jun
25
comment Why is HMAC-SHA1 still considered secure?
@fgrieu - I think I made a mistake in terminology - when I wrote signing, I should have actually written generating a message authentication digest to protect integrity. In case of collisions, you can change the message and preserve the same MAC, so it is a problem, right?
Jan
15
comment Is RSA with SHA1 broken?
I am facing the same issue faced here with SHA2 - forums.embarcadero.com/thread.jspa?threadID=96592
Dec
30
comment Encryption and HMAC in a PSKC file
I have another similar question (actually the opposite) - crypto.stackexchange.com/questions/21084/… - please take a look if you get the time.
Dec
29
comment Encryption and HMAC in a PSKC file
that's actually xxd -p -r > temp
Dec
29
comment Encryption and HMAC in a PSKC file
Just FYI - I could also avoid the binmode/perl stuff by using the following for %i in (000102030405060708090a0b0c0d0e0f) do (echo/|set /p="%i") | xxd -p -r temp I have xxd from my vim install on windows
Oct
10
comment Using C_Sign to create a PKCS7 signature
Thank you, can you recommend some appropriate library I can use with C++ on Windows. Are there any Microsoft APIs which provide this functionality.
Jun
24
comment Minimum length of PKI key for signature
I require this info for both - updated.
Apr
13
comment Perfect Forward Secrecy in TLS
If DH-RSA is static DH & it has certs with DH public keys - then were does the RSA come in in DH-RSA?
Apr
13
comment Perfect Forward Secrecy in TLS
So HTTPS with DHE-RSA means 1) One message is signed with RSA to prove authenticity of the website 2) the session key is derived using DH 3) rest of the communication is encrypted using the session key.
Apr
13
comment Perfect Forward Secrecy in TLS
@Alex - en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange OR crypto.stackexchange.com/questions/8933/…
Sep
6
comment What are the advantages of TOTP over HOTP?
@JaderDias - Neither of the algorithms need an internet connection
Aug
6
comment How secure would this code be against cryptanalysis?
How is the decryption happening?