Reputation
Next privilege 125 Rep.
Vote down
Badges
2
Newest
 Supporter
Impact
0 people reached

  • 0 posts edited
  • 0 helpful flags
  • 12 votes cast
Feb
4
comment Should we sign-then-encrypt, or encrypt-then-sign?
@D.W.: Validating the signature can be constant time; which will give you resistance against some classes of timing attacks (i.e. closes off a side channel). While not useful for humans, it can be very useful for machines trying to break other machines. en.wikipedia.org/wiki/Timing_attack
Sep
8
awarded  Supporter
Sep
8
comment SHA1 usage for passwords, alternatives and advantages?
@Nakedible: Which would IMHO be a good argument not to use crypt - it may not provide adequate security on some systems, and there's no easy way to tell.
Sep
6
awarded  Autobiographer