123 reputation
4
bio website
location
age
visits member for 1 year
seen Nov 14 '13 at 21:35

Nov
14
comment Could MITM securely identify identity?
@RickyDemer oh sorry, firewall, in this context MITM who we want to be able to be able to identify sender, but not decrypt content.
Nov
14
comment Could MITM securely identify identity?
I guess if Alice would encrypt with one key and sign resulting encrypted data with another key, FW would be able to check signature without being able to decrypt? Presumably without latency cost, as FW would need to have been taught identity of Alice at prior time?
Nov
14
comment Could MITM securely identify identity?
@CodesInChaos then Alice would need to know who is the FW. It would also introduce additional delay to end-to-end session establishment.
Nov
14
asked Could MITM securely identify identity?
Sep
16
comment bcrypt and pbkdf2 double hashing
I like redundancy and I feel probability of having implementation defect in XOR operation is significantly smaller than in external crypto library which I'm not competent enough to review.
Sep
15
comment bcrypt and pbkdf2 double hashing
You give opinion on the probability of hash being insecure by design as very low. You don't address the other risk I'm trying to protect from, the probability of some language having catastrophic implementation defect in some crypto library.
Sep
15
awarded  Scholar
Sep
15
accepted bcrypt and pbkdf2 double hashing
Sep
15
awarded  Supporter
Sep
15
comment bcrypt and pbkdf2 double hashing
As neither pbkdf2, scrypt or bcrypt are extremely common, I don't think it's paranoid to think that in some less used programming language implementation may have naive mistakes which make it much less secure than intended. I'm happy about the scrypt suggestion, but the main question remains, how should I combine two hashes to protect myself from scenario where one of them is not as secure as intended.
Sep
15
awarded  Student
Sep
15
awarded  Editor
Sep
15
revised bcrypt and pbkdf2 double hashing
added 46 characters in body
Sep
15
asked bcrypt and pbkdf2 double hashing