186 reputation
2
bio website syfuhs.net
location Toronto, Canada
age
visits member for 2 years, 8 months
seen Mar 31 at 16:09

Pain in the neck. Microsoft Developer Security MVP.


Mar
5
comment Any use for now-defunct Mt Gox Yubikey?
I think its a safe bet to assume that access code isn't known by just them anymore too... ;)
Feb
6
comment What is a Non-Interactive Zero Knowledge Proof?
I wonder how many crypto schemes are involved when playing with yourself.
Aug
5
comment How does identification currently work with the German identity card?
My German is non-existant so I'm just guessing here, but it sounds like a X509-like smart card based on what I'm reading from Gemalto's site.
May
4
awarded  Teacher
May
4
answered Is AES really used for Top Secret stuff?
Apr
30
comment Is it worth applying a MAC on data in a HSM?
For experimentation and learning, right? :)
Apr
22
comment How is CipherCloud doing homomorphic encryption?
[Comment omitted due to DMCA request]. You know this site is becoming popular when...
Mar
7
comment Security of tokenization of plain text conversations - cryptanalysis
Regarding #3: I don't think thats actually converted to chinese insomuch as the encrypted data, when converted to a string, falls within the Chinese character set. It's a byproduct of the process.
Nov
8
awarded  Supporter
Oct
23
comment Is the CBC weakness in XML Encryption a new discovery? Are other applications vulnerable?
My understanding was that the standard implementation by W3C is vulnerable, not CBC itself, but I can't read German and all the news reports I found were vague...
Sep
23
answered Webapp password storage: Salting a hash vs multiple hashes?