1,342 reputation
1313
bio website
location Madrid, Spain
age
visits member for 1 year, 4 months
seen 13 hours ago

Nov
7
comment Is encrypting credit card numbers one by one with rsautl secure?
@owlstead - yup, key size is only a small part of key management - but one that often gets overlooked with RSA - I'm amazed at the number of people still using 1024-bit keys in the wild. Thought it was worthwhile making a PSA.
Nov
7
comment Is encrypting credit card numbers one by one with rsautl secure?
Just making this comment because it wasn't specified in the question - a 2048-bit key should be used as a minimum (but I'd go even higher if I were encrypting something as sensitive as credit card numbers).
Nov
5
comment Splitting a password for dual roles
Have you considered using a slow KDF like PBKDF2 or Scrypt to compensate for the low entropy of the password, and then simply split the output into two keys?
Nov
2
comment Are there any Javascript CSPRNGs?
@e-sushi - the whole chicken/egg problem with javascript is real - but still, the world could be forgiven for having trust-issues with TLS/the-internet/NSA. This question is strongly related to this one. It's a contentious issue - I err very much on the side of experimentation and creativity - not qualities that usually lend themselves well to crypto.
Nov
2
comment Are there any Javascript CSPRNGs?
@CharlesHoskinson - C'mon - I'm a fan of JS, really, but 'King'? In my opinion, a language that can't handle 64-bit integers natively in crypto is going to struggle. I also think that weakly-typed languages like JS are asking for trouble.
Nov
2
comment Are there any Javascript CSPRNGs?
@e-sushi: "Am I really dealing with a random number generator, or with something provided by an attacker?" - what's your line of reasoning for doubting this assertion? Say for example, a sound javascript implementation of CTR_DRBG as defined in SP800-90A, delivered via TLS, using decent quality entropy (or even something like the service offered here). Given the NSA's recent indiscretions (amongst others), I think JS crypto is something worth considering.
Nov
1
comment HMAC vs Encrypted Hash
@RickyDemer - on second thought - I see your point - I'm removing my initial comments.
Nov
1
comment HMAC vs Encrypted Hash
@user2908183 Good discussion here...
Nov
1
comment Does ssl_rsa_with_rc4_128_md5 have known weaknesses?
@e-sushi - good for you for not being a See-you-next-Tuesday. I think this forum could use more of your inclusive attitude.
Oct
31
comment How to use HMAC-SHA1, HMAC-SHA2 in conjunction with AES
@user907810 - I can't speculate as to what's happening internally in your library. Regarding a 'master key', well assuming you begin with a 128-bit (minimum) cryptographically strong key (the master key), you could use something like HKDF to derive encryption and authentication keys.
Oct
27
comment The weak link is the password?
@MarkLitovsky - directly from wikipedia: "When the standard was written in 2000, the recommended minimum number of iterations was 1000, but the parameter is intended to be increased over time as CPU speeds increase." I've heard it said that the number of iterations should (roughly) be doubled every year. 100000 or a million iterations these days is common. Of course, nowadays, things like scrypt offer better protection.
Oct
26
comment The weak link is the password?
@MarkLitovsky - PBKDF2 is used in Truecrypt. The user-selected hash algorithms you refer to are used as the underlying hash in PBKDF2, and also in Truecrypt's PRNG. It's worth mentioning, however, that Truecrypt only uses 1000 PBKDF2 iterations, which is far too few.
Oct
25
comment Do any non-US ciphers exist?
Salsa20's author is DJB - an American. Don't hold that against him though - he's a freedom fighter.
Oct
25
comment Do any non-US ciphers exist?
"USA represent large amount of the entire worlds population" - it represents less than 5%, actually.
Oct
25
comment Which crypto libraries/programs do we have the most confidence in?
This question is likely to be closed because it's primarily opinion based, and too subjective to answer. However, I'm interested to hear the answers nonetheless.
Oct
25
comment Hypothetical unknown cipher - security in obscurity?
Your question reads like a Choose Your Own Adventure book. They're valid questions - but I suggest you break them up into smaller, more answerable questions. I also suggest you read on up Kerckhoffs's principle.
Oct
24
comment Knowing pre-encryption data, can we find the private key CryptoLocker used?
Read up on known plaintext attacks. If the files have been encrypted with a modern symmetric cipher (likely) such as AES, you're out of luck.
Oct
22
comment Implementing OpenSSL padding
@user4982 - PCKS5 padding is recognizable in the ciphertext by comparing its length with that of the cleartext.
Oct
22
comment Implementing OpenSSL padding
I'm no openssl expert here, but the documentation states: "All the block ciphers normally use PKCS#5 padding also known as standard block padding". I tried your code from the command line and padding was indeed used. Keep in mind that padding might just be a single byte, depending on the length of the input.
Oct
20
comment Serpent block cipher : S0 to S7 functions unclear
@archie - fair point - although Cryptix is now defunct, and besides, the Cryptix dev team is already credited in the JSerpent source (along with the original authors of the algorithm).