Reputation
Next privilege 125 Rep.
Vote down
Badges
2
Newest
 Supporter
Impact
0 people reached

  • 0 posts edited
  • 0 helpful flags
  • 17 votes cast
Feb
18
comment Layman's explanation of encryption backdoors
@aroth: That's a very different question; but at least for OpenSSH, well addressed at stribika.github.io/2015/01/04/secure-secure-shell.html
Feb
4
comment Should we sign-then-encrypt, or encrypt-then-sign?
@D.W.: Validating the signature can be constant time; which will give you resistance against some classes of timing attacks (i.e. closes off a side channel). While not useful for humans, it can be very useful for machines trying to break other machines. en.wikipedia.org/wiki/Timing_attack
Sep
8
awarded  Supporter
Sep
8
comment SHA1 usage for passwords, alternatives and advantages?
@Nakedible: Which would IMHO be a good argument not to use crypt - it may not provide adequate security on some systems, and there's no easy way to tell.
Sep
6
awarded  Autobiographer