Reputation
15,419
Next tag badge:
69/100 score
19/20 answers
Badges
1 23 67
Newest
 Yearling
Impact
~346k people reached

Nov
11
reviewed Reviewed ASCII input to HMAC weaker than raw bytes?
Nov
11
reviewed Reviewed what are the security benefits of LUKS?
Nov
11
awarded  Nice Answer
Oct
31
awarded  Notable Question
Oct
10
comment Why is TLS SRP verifier based on user name?
@nefarel: Dunno. I might mutter something about Merkle-Damgård length extension attacks, or about provable reducibility to the PRF-ness of the SHA1 compression function, but honestly I have no real idea. It looks sort of like a clumsy imitation of HMAC, but since the folks who designed SRP are pretty smart cryptographers, presumably it's a clever imitation of HMAC, I just don't know exactly how or why. That might make an interesting question in itself.
Oct
4
revised How is XOR used for encryption?
added 465 characters in body
Oct
4
answered How is XOR used for encryption?
Sep
30
awarded  Explainer
Sep
26
reviewed Close Base64 for a hash algorithm
Sep
26
reviewed Leave Open Question about the security of Substitution-Permutation Network
Sep
25
reviewed Leave Open Why are we advising PKI if we know that quantum computers will break them?
Sep
25
comment Why are we advising PKI if we know that quantum computers will break them?
Practical quantum computing, like practical fusion power, has been "10-20 years in the future" for several decades already. Basically, in both cases, we thought we knew the theory, and that the rest would be just a simple matter of engineering. Alas, sometimes "mere engineering" turns out to be not so easy, after all.
Sep
25
reviewed Leave Open stream cipher computation cost
Sep
25
revised stream cipher computation cost
added 1026 characters in body
Sep
25
answered stream cipher computation cost
Sep
25
reviewed Leave Open Using modulus in one time pad?
Sep
25
reviewed Satisfactory Is SRP post-quantum secure?
Sep
25
reviewed Satisfactory Combining two keys
Sep
25
reviewed Satisfactory Can you fake messages from recorded message-history?
Sep
25
reviewed Satisfactory ECDSA with SHA256 and sepc192r1 curve: Impossible, or how to calculate $e$?