Reputation
441
Top tag
Next privilege 500 Rep.
Access review queues
Badges
3 16
Impact
~19k people reached

May
4
comment What is the most secure hand cipher?
Is it really strong, or is it a toy cipher with no real strength?
May
4
comment Why is elliptic curve cryptography not widely used, compared to RSA?
Another advantage of RSA: public key operations (encryption/sig verification) are still faster than for ECC with same strength.
Apr
26
comment What data is saved in RSA private key?
That works :) Somehow I haven't got a notification or haven't noticed it. Why is all this data saved? Is it not enough to save just p, q, e and probably d? What are first and second exponent used for? Is there any integrity check performed to verify that these variables are consistent?
Apr
20
comment Does key authentication in SSH protect from MitM?
Let's speak only about public key cryptography, as it's the one attacked by MitM.
Apr
17
comment implications of SSH server key compromission when authenticating users against a public key
@PaĆ­loEbermann see below
Apr
17
comment Does key authentication in SSH protect from MitM?
Does someone else share the opinios of user1451340?
Apr
16
comment implications of SSH server key compromission when authenticating users against a public key
Does it change something if the mitmer knows client's public key and thus can decrypt the session key? Can server connection be downgraded to use RSA? Do typical SSH configuration explicitely require DH?
Apr
16
comment Does key authentication in SSH protect from MitM?
But maybe you want to move this question to security.stackexchange.com. - Why? crypto.stackexchange.com/questions/3706/…
Apr
16
comment implications of SSH server key compromission when authenticating users against a public key
@CodesInChaos can the mitmer use RSA for client connection and DH for server connection so that he gets the same session key for both connections?
Apr
4
comment Can one have an authentic, but repudiable, message without a previously shared secret?
But you don't know whom the key belongs. But if you say you use signed DH, all will be fine.
Apr
4
comment Can one have an authentic, but repudiable, message without a previously shared secret?
DH provides no authentication.
Apr
4
comment Does a trace of SSL packets provide a proof of data authenticity?
SSL also provides integrity. Is this mechanism symmetric too?
Mar
27
comment Even passwords are vulnerable to hash collision attacks?
Interesting. Can you provide real numbers for some hash functions?
Mar
25
comment Even passwords are vulnerable to hash collision attacks?
Duadratic security is more that enough :) Even MD4 which is completely unresistant to collisions is resistant to first and second preimages - at least, no successful attacks are known.
Mar
24
comment Even passwords are vulnerable to hash collision attacks?
I assumed first preimage is something that works with selected hash function and is faster than general purpose attacks like bruteforce or rainbow.
Mar
23
comment Secure modulus length for Diffie-Hellman
Yes, but computing capabilities have grown a litte since then.
Mar
23
comment Secure modulus length for Diffie-Hellman
May 2003 . You are a bad CO.
Mar
23
comment Secure modulus length for Diffie-Hellman
<if the messages are encrypted.> - no, not really
Mar
23
comment How can I validate a hashed password if all I have is another hash?
If you already use public key cryptography, take a look on SRP - at least it is not homebrew.
Mar
23
comment Even passwords are vulnerable to hash collision attacks?
Are bruteforce or rainbow tables really first preimage attacks?