meta user
network profile
| bio | website | stackoverflow.com |
|---|---|---|
| location | United States | |
| age | 33 | |
| visits | member for | 1 year, 8 months |
| seen | Apr 4 at 20:18 | |
| stats | profile views | 7 |
How much rep do I need to get an epic mount?
|
Mar 28 |
comment |
How do I unpack the x and y values from the BITSTRING in a DER ECDSA public key? How about the public key? |
|
Feb 8 |
comment |
Tell me about non-MD5/SHA1 key fingerprints I recall reading some standard about taking the SHA2 hash of a DER representation of the private key, and a standard name for this kind of fingerprint. |
|
Sep 18 |
comment |
Is the mod_auth_tkt scheme secure? With HMAC you can feed key+ipad and key+opad to two instances of the hash function, and then clone the hash function state to sign any number of messages. So you only have to hash the key twice to sign any number of messages. |
|
Jul 27 |
comment |
Should I use md5 for my new application? It used to be a non-security application. The plan was to re-use the file for signing. |
|
Jul 27 |
comment |
Should I use md5 for my new application? The other day I made the argument that md5 should be replaced with sha-256 in a particular application. I wanted to sign the file digests. I was stunned by the fervent opposition to what I thought was a completely innocuous change. So I am asking for advice about how to better explain the harmlessness of strong hashing to my peers. |
|
Jul 13 |
comment |
Signatures: RSA compared to ECDSA Signing, verification, and key generation are all very fast in the Ed25519 implementation. |
|
Sep 13 |
comment |
How do I construct a 256-bit hash function from 128-bit AES? @D.W. I do actually need a MAC, but I'm interested in the answer to the stated question. I may ask another question about implementing MACs on constrained devices. |
|
Sep 12 |
comment |
How do I construct a 256-bit hash function from 128-bit AES? Thanks for the useful advice on key lengths and the inapplicability of the birthday paradox. I probably will use CBC-MAC or CMAC (for variable-length messages according to Wikipedia) for my application. |
|
Sep 10 |
comment |
How do I construct a 256-bit hash function from 128-bit AES? Doesn't the birthday paradox mean a 128-bit hash only provides 64 bits of security when looking for collisions? |
