zahllos

37 ms·

271.
by zahllos 6y ago
I also didn't mean to be snarky, but E-521 is far too estoric a choice to be casually dropped in without comment. I am fairly sure BLS curves see more use :) If we're not careful some hodlgang hooligan will have this implemented (
272.
by zahllos 6y ago
E-521 is a popular curve? Are you sure you don't mean P-521? I mean I'm all for the Edwards variant but I'm fairly sure most people haven't heard of it and I'm not aware of a single popular crypto library that imple
273.
by zahllos 6y ago
So the way this is supposed to work is that providers hand out /48s and each site should be allocated a /64. In practice if you for example rent a VPS, you'll be handed a /64 for it by your service provider from their &#
274.
by zahllos 6y ago
The grandparent comment is likely referring to the TOLA Act, which allows Australian police and intelligence agencies to issue for example technical assistance requests to decrypt or otherwise get access to whatever data they want. As I und
275.
by zahllos 6y ago
Stat then dlopen is a toctou (time of check/time of use) bug. There's a race condition between the check succeeding and the dlopen being called in which that library might be replaced by a malicious one. Like all race condition bu
276.
by zahllos 6y ago
We probably have different ideas of what "political" means here. I simply mean that the motivations for dismissing SIMON and SPECK likely have more to do with it being the NSA that proposed them and the Snowden leaks at the time t
277.
by zahllos 6y ago
There's a portable userspace implementation written in Go, for places where a kernel driver is unavailable at present.
278.
by zahllos 6y ago
True true, it does. I'm not sure to what extent it is needed in kernel but I'm sure there are some use cases. I was aiming, if perhaps badly, at the crypto really, as I'd seen some arguments that we needed it in Linux to run
279.
by zahllos 6y ago
It is a standard. RFC 7748. It is also a part of TLS 1.3.
280.
by zahllos 6y ago
Rotating the group was never the point or the problem. The problem was that typically Linux distributions shipped a 1024-bit hard coded DH parameters file and most people didn't bother to change it. Groups with low security remain the
281.
by zahllos 6y ago
Your understanding is correct. Before these leaks and when DH was widespread you could generate your own dhparams file for DH connections, both for sshd and for TLS connections. It was advised to do so in corners that understood what that m
282.
by zahllos 6y ago
Indeed. There was a windows services for Unix subsystem based on Xenix mentioned elsewhere and that was based on the subsystem architecture. When you use it, you get a nice Korn shell and it is built on PE binaries linked against PSDLL.DLL.
283.
by zahllos 7y ago
> It's sad that efficient complete formulas for Weierstrass curves were found only after Curve25519 was well established This is not the only motivating factor for curve25519. There is also: that montgomery curves work well with the
284.
by zahllos 7y ago
Yes. Firstly, classical VOIP including ones involving video have two stages: a signalling protocol called session initialization protocol (SIP). Secondly they have a real-time protocol, or RTP. SIP is used so that clients can find each othe
285.
by zahllos 7y ago
Correct on both counts (current OU student). 120 credits = full time studies, 40 hours per week. So 30 is 10 hours, 60 credits is 20 hours. This is of course an estimate. Some weeks you have assignments due as well as course material to stu
286.
by zahllos 7y ago
Thanks a lot! I'll see what there is :)
287.
by zahllos 7y ago
I'd love to work for redhat, but it's hard to search for all remote positions and many seem tied to the US. I live in Switzerland and have run fedora as my daily driver for years now. My experience is oriented towards the low leve
288.
by zahllos 7y ago
What the parent commenter meant, I believe, is that the UK Supreme Court is a new construct. Previously, the court of last resort (for cases like this at least) was the House of Lords, specifically those members known as the "law lords
289.
by zahllos 7y ago
I'm not sure either, if I'm honest. Patchguard isn't 100% about malware. In the XP-- days, antivirus/firewall vendors did all kinds of DKOM to install their hooks. This resulted in Windows being unstable in some cases, s
290.
by zahllos 7y ago
Of course. This is simply a cat and mouse game at this stage. PatchGuard on Windows has the same weakness, and its defense is simply by being implemented through very obscure means. Pretty much every version of Windows has changed the techn
291.
by zahllos 7y ago
Privacy is really the wrong word in my opinion. What you mean is confidentiality. This might sound like nitpicking, but private communication might mean that some attacker does not know who is talking to whom, which is not what TLS even tri
292.
by zahllos 7y ago
Fair warning, mine isn't advice, just a comment about a technique that requires experienced cryptographers to use. I wouldn't attempt to use it myself :)
293.
by zahllos 7y ago
Here is a sage script that implements the described attack. I have scripts that implement curve parameters separately (so I can load them into other scripts as needed) so this might look a little redundant in places: #!/usr/
294.
by zahllos 7y ago
It's not server relief, but there's also a technique called delegated hashing, i.e. allowing the client to do part of the work of computing the actual hash. This was one of the main selling points of the Makwa candidate for the pa
295.
by zahllos 7y ago
The reason you haven't heard of it before now is that it was released 2020-01-09, last Thursday at the time of writing, at Real World Crypto.
296.
by zahllos 7y ago
I'm not Moxie, and I can't speak for him, but I have a good idea what the arguments are as I "do crypto". These aren't my opinions necessarily, I'm just repeating what I believe the arguments to be. This can be
297.
by zahllos 7y ago
It's also worth pointing out the NIST LWC has a proposed security level of 112-bit. We're actively designing and analyzing algorithms that can be acceptably below the 128-bit security bound, yet have a sufficient security margin f
298.
by zahllos 7y ago
Factoring large numbers won't have any effect on symmetric cryptography. Finite field cryptography, if you want to call it that (DH, RSA) requires the primes be big enough to generate sufficiently large finite fields for all algorithms
299.
by zahllos 7y ago
The way Wire does this, if I recall correctly, is that logging into your account (proving to the server you can authenticate) allows you to push up a new device public key, which you can see as your device fingerprint in the UI. A conversat
300.
by zahllos 7y ago
While I agree that Mozilla's by default decision is wrong, this is not actually true of other browsers. Chrome will check your existing DNS provider to see if they support DoH and if they do, query that way. If not DNS proceeds as norm

More ›