ctz

36 ms·

331.
by ctz 12y ago
Let's do the math: A PBKDF2 cost factor/iteration count of 12000 and 32-byte output means each candidate passphrase costs 12002 SHA256 blocks. I can buy a crappy bitcoin miner which will do 2GH/s for about USD19. Let's s
332.
by ctz 12y ago
> The organisation responsible for last mile connections is Openreach About 30% of UK homes are also served by ex-Telewest/NTL/Virgin Media cable. The last mile arrangements for that are almost identical to how AIUI things wor
333.
by ctz 12y ago
This flavour of quantum computing has no obvious implications for crypto, and the technology isn't transferrable to a computer which would. The problem is that quantum annealing (basically, solving complex optimisation problems) is a s
334.
The Longitude Prize 2014(longitudeprize.org)
4 points by ctz 12y ago|0 comments
335.
by ctz 12y ago
window.solveCube() if you want to cheat.
336.
by ctz 12y ago
Entry-level Android phones running 2.3 are sadly still common: http://www.carphonewarehouse.com/phone/samsung/samsung-galax... http://www.carphonewarehouse.com/phone/samsung/samsung-galax
337.
by ctz 12y ago
> By using a CA owned by the Swiss government, we ensure the highest security for our users because it is extremely unlikely SwissSign can be coerced into validating another website impersonating us This is a dangerous and insane misunde
338.
by ctz 12y ago
The sentence is saying that collision resistance seems to be practically harder to achieve than second order preimage resistance. One reason is a lot of hash functions are iterative in nature (you have a compression function repeatedly appl
339.
by ctz 12y ago
I have the same experience ( http://jbp.io ). But I noticed that my DNS zone is quite different to how Github now tell you to do it (I have an A record to 204.232.175.78). So perhaps that is a factor.
340.
by ctz 12y ago
> I don't think this generates true random numbers. I'm interested in what makes you think that. If you could predict the precise course of electrons through a reverse biased pn junction, I would have thought that would be a b
341.
by ctz 12y ago
There is usually little or no security boundary between the AP and complex peripherals (like the baseband, cameras, GPU, audio subsystem, etc.) Usually these will have direct access to main memory (like having a DMA channel given to them),
342.
by ctz 12y ago
Some observations: - This uses an external service 'scrambls' ( https://scrambls.com/ ) which seems to do per-message symmetric key management. Therefore, the owners of this service can read all your messages. - Th
343.
by ctz 12y ago
Sorry, I was confusing this with something else (ECDH_RSA suites, where you can achieve decent levels of forward secrecy by signing a new ECDH key offline every minute or so). All ECDHE_ suites need the high value key to be online at all t
344.
by ctz 12y ago
What is proposed for removal is using RSA as a key encapsulation mechanism. The reasons are: a) you don't get forward secrecy, b) the details of the way it works are just wrong, have been broken several times in the past, and killing
345.
by ctz 12y ago
"403. That’s an error. Your client does not have permission to get URL /cloud-dns/ from this server. (Client IP address: [my-ipv6-addr]) We're sorry, but this service is not available in your country." Google is den
346.
by ctz 12y ago
> Could you "accidentally" make a FIPS compliant library? Let's differentiate between "FIPS compliant" and "FIPS certified". FIPS complaint: you could get a FIPS certified product if you wanted, witho
347.
by ctz 12y ago
This is not true. FIPS requires that any 'approved' included crypto algorithm implementations are self-tested, and pass a verification program (just a big bunch of somewhat poorly conceived known answer tests). It also has a list
348.
by ctz 13y ago
I don't know how you came to this conclusion. There are instagram accounts kathleen (displayed name Kathleen) and ___kathleen (displayed name kathleen).
349.
by ctz 13y ago
This is feasible in the current X509 public CA system, thanks to name and path length constraints. However, I don't know of any CAs which will issue restricted suitable certs for any sensible amount of money.
350.
by ctz 13y ago
You're right, and it's by-the-by; I missed that decrypt() had moved on to CTR in that code. If it had been CBC with ISO7816 or PKCS#5 padding then I do think this would be attackable. The unpadding errors from decrypt trump the M
351.
by ctz 13y ago
It comes on to authenticated encryption later. https://github.com/kisom/gocrypto/blob/master/chapter5/auths... This is the authenticate-then-decrypt-anyway pattern. 100% Vaudenay compliant.
352.
by ctz 13y ago
This patch is setting OPENSSL_NO_HEARTBEAT, but openssl actually only disables heartbeats when you set OPENSSL_NO_HEARTBEATS (note trailing S). Someone should make a thing which does sentiment analysis on commit messages, and flags vitrioli
353.
by ctz 13y ago
I've also submitted patches to OpenSSL and been entirely ignored[1]. The latest of which strictly improved testing, documentation and included a detailed study and write-up of actual bugs in OpenSSL and downstream code[2]. My conclusi
354.
by ctz 13y ago
This is not a TLS stack.
355.
by ctz 13y ago
If you are using a HSM your long-term authenticity key won't be in the memory space of the process with openssl inside it. So that should be OK. However, everything else in that process (like, all the traffic you were hoping to protec
356.
by ctz 13y ago
I wonder how many service providers with big OpenSSL deployments (cloudflare, google, facebook, etc.) will do the sane thing and roll their authenticity keys. I'm guessing zero. (Assuming they are deployed in such a way that their lon
357.
by ctz 13y ago
The realloc implementation in this blog is incorrect: the passed in pointer must not be freed if realloc is called with a non-zero length and returns NULL. This will cause a double free in correct callers. As someone else pointed out, the
358.
by ctz 13y ago
Historically a huge amount of effort went into making PC hardware enumerable at runtime and hotpluggable: BIOS, then ISA PnP, then PCI/PCIe, and ACPI. eg. There are BIOS functions dedicated to telling you, in no uncertain terms, what
359.
by ctz 13y ago
Rampant cloning and 'wild west' exactly describes home computer game development in the eighties. I don't think it's unique to mobile, or a modern phenomena.
360.
by ctz 13y ago
Don't be evil.

More ›