513 reputation
315
bio website sitewat.ch
location Teresina, Brazil
age
visits member for 3 years, 2 months
seen May 6 at 16:57

Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for more than 5 years. I have found numerous vulnerabilities. I have received three severity metrics from the Department of Homeland Security. The most severe is in the top 500 more dangerous software flaws of all time.

My CVE numbers:

CVE-2011-0050 CVE-2011-0049 CVE-2011-0048 CVE-2009-1759 CVE-2009-0468 CVE-2009-0467 CVE-2009-0389 CVE-2008-6975 CVE-2008-6499 CVE-2008-6498 CVE-2008-5621 CVE-2008-2043 CVE-2008-2002 CVE-2007-6485 CVE-2007-6458 CVE-2007-6459 CVE-2007-6471 CVE-2007-5646 CVE-2007-0134 CVE-2007-0132 CVE-2007-0130 CVE-2006-6781 CVE-2006-6780 CVE-2006-3208 CVE-2006-3207 CVE-2006-3206 CVE-2006-3205 CVE-2006-3204 CVE-2006-3203


Sep
29
awarded  Popular Question
Sep
24
awarded  Autobiographer
Jul
2
awarded  Curious
Feb
4
awarded  Popular Question
Aug
30
awarded  Notable Question
Aug
13
awarded  Yearling
Jul
31
awarded  Citizen Patrol
Jul
28
awarded  Nice Question
Apr
22
asked Using the same secret key for encryption and authentication in a Encrypt-then-MAC scheme
Feb
7
comment Is there a problem with constructing a CSPRNG using MD5 or SHA1?
+1 Great paper. The CTR_DRBG CSPRNG design looks great. Do you know of a paper that talks about keystream generators for DRBG?
Feb
7
accepted Is there a problem with constructing a CSPRNG using MD5 or SHA1?
Feb
4
revised Is there a problem with constructing a CSPRNG using MD5 or SHA1?
added 121 characters in body
Feb
4
comment Is there a problem with constructing a CSPRNG using MD5 or SHA1?
@CodesInChaos In this case, using a CRC-like function for mixing, and md5 or sha1 for the output stream.
Feb
4
asked Is there a problem with constructing a CSPRNG using MD5 or SHA1?
Dec
21
comment Efficient Symmetric Mutual Entity Authentication Protocol
@Martin Lundberg if you have a "server" then you can have a "time server". I think that not having time in your current protocol is a mistake.
Dec
21
revised Efficient Symmetric Mutual Entity Authentication Protocol
added 212 characters in body
Dec
21
revised Efficient Symmetric Mutual Entity Authentication Protocol
added 204 characters in body
Dec
21
comment Efficient Symmetric Mutual Entity Authentication Protocol
@Martin Lundberg Kerberos is probably more efficient than your protocol because its doesn't use RSA. I would avoid asymmetric cryptography as much as possible. Not having an accurate clock has other problems. How do you void keys at noon when their time is up? This is why kerberos tokens have a timestamp!
Dec
21
answered Efficient Symmetric Mutual Entity Authentication Protocol
Dec
20
comment What is an easy method of proving that a cryptographic oracle attack is possible?
we are the cryptographers. I think that Nathan Cooper's approach is better. Try manipulating the cipher text and look at the response. See if you can get the server to respond with a Noise Block for CBC-R or simply proving malleability by attacking the padding.