12,438 reputation
11352
bio website vyznev.net
location Helsinki, Finland
age
visits member for 3 years, 4 months
seen 12 hours ago

I'm a PhD student in biomathematics, working on stochastic individual-based models of evolution in spatially structured populations. My other interests include cryptography, programming games and puzzles, photography and graphic design.

Vote for me in the Mathematics.SE 2014 moderator election!


I'm the main author and maintainer of the Stack Overflow Unofficial Patch (SOUP), a user script for browsers with GreaseMonkey-compatible user script support (Firefox, Chrome, Opera, possibly Safari) that fixes or works around a number of outstanding issues with the Stack Exchange user interface.

I tend to answer a lot more questions than I ask. Some answers I'm rather proud of:

CC-Zero Please consider any (original) code I post to Stack Overflow and other Stack Exchange sites to be released under CC-Zero unless stated otherwise. You may do whatever you want with it and don't have to credit me in any way, although of course that would be nice.


Aug
9
revised AES plaintext is smaller than 128 bits - how to expand?
copyedit, fix spelling in title
Aug
9
revised Any problems with this secure time synchronization scheme?
edited tags
Aug
9
wiki
Aug
9
wiki
Aug
9
comment Any problems with this secure time synchronization scheme?
@nightcracker: Our very first meta question was about literature recommendations (but see also this later question). Generally, I'd say the SE network frowns on 1) vague subjective questions with many equally valid answers and 2) answers that only link to external resources. Asking "What's a good book about X?" tends to fall into both categories, whereas "Is there any way to do X?" doesn't.
Aug
9
revised Is this method of deterministically using CBC secure?
edited tags
Aug
9
answered Is this method of deterministically using CBC secure?
Aug
9
reviewed Reject Help me describe/identify this challenge-response protocol/algorithm?
Aug
9
reviewed Approve Could using sequential plaintext uncover AES key?
Aug
9
reviewed Edit How key materials are generated in SSL V3 from master secret
Aug
9
revised How key materials are generated in SSL V3 from master secret
Corrected quote and formatting.
Aug
8
answered Specification of the Megamos crypto algorithm
Aug
8
comment Securing content and login with “same” password
@user12889: If you don't want to allow username sniffing, you could always serve a dummy salt (such as an HMAC of the username using a fixed key) for any unknown usernames. Just try to avoid timing attacks (e.g. by always doing both a DB lookup for the salt and the HMAC calculation for any username before deciding which one to send). That said, generally one ought to assume usernames to be public information anyway; protecting them against guessing may slow down some attacks, but you shouldn't rely on it for any real security. That also means it's OK to leak them if you need to.
Aug
7
reviewed Approve Specification of the Megamos crypto algorithm
Aug
7
revised Securing content and login with “same” password
added 1511 characters in body
Aug
7
comment Securing content and login with “same” password
@D.W.: Agreed, the second scheme is better, if it's feasible. However, then you're no longer really implementing an encrypted file storage server, but simply a generic file storage server with secure password authentication.
Aug
7
revised How HOTP values are validated according to RFC 4226
edited tags
Aug
7
answered How HOTP values are validated according to RFC 4226
Aug
7
answered Securing content and login with “same” password
Aug
4
wiki created nonce description