267 reputation
19
bio website stackoverflow.com
location United States
age 35
visits member for 3 years, 2 months
seen Aug 26 at 16:37

How much rep do I need to get an epic mount?


Jul
6
comment What is the best way to send two floating point numbers to a server on the internet from a small device such as an arduino?
You only have to write to EEPROM the nonce or counter value you will resume from in case of power loss. You could increment it by quite a large number to manage write wear.
Mar
28
comment How do I unpack the x and y values from the BITSTRING in a DER ECDSA public key?
How about the public key?
Feb
8
comment Tell me about non-MD5/SHA1 key fingerprints
I recall reading some standard about taking the SHA2 hash of a DER representation of the private key, and a standard name for this kind of fingerprint.
Sep
18
comment Is the mod_auth_tkt scheme secure?
With HMAC you can feed key+ipad and key+opad to two instances of the hash function, and then clone the hash function state to sign any number of messages. So you only have to hash the key twice to sign any number of messages.
Jul
27
comment Should I use md5 for my new application?
It used to be a non-security application. The plan was to re-use the file for signing.
Jul
27
comment Should I use md5 for my new application?
The other day I made the argument that md5 should be replaced with sha-256 in a particular application. I wanted to sign the file digests. I was stunned by the fervent opposition to what I thought was a completely innocuous change. So I am asking for advice about how to better explain the harmlessness of strong hashing to my peers.
Jul
13
comment Signatures: RSA compared to ECDSA
Signing, verification, and key generation are all very fast in the Ed25519 implementation.
Sep
13
comment How do I construct a 256-bit hash function from 128-bit AES?
@D.W. I do actually need a MAC, but I'm interested in the answer to the stated question. I may ask another question about implementing MACs on constrained devices.
Sep
12
comment How do I construct a 256-bit hash function from 128-bit AES?
Thanks for the useful advice on key lengths and the inapplicability of the birthday paradox. I probably will use CBC-MAC or CMAC (for variable-length messages according to Wikipedia) for my application.
Sep
10
comment How do I construct a 256-bit hash function from 128-bit AES?
Doesn't the birthday paradox mean a 128-bit hash only provides 64 bits of security when looking for collisions?