« first day (2653 days earlier)      last day (2023 days later) » 

3:46 AM
> When Textbook RSA is Used to Protect the Privacy of Hundreds of Millions of Users
 
 
8 hours later…
12:04 PM
I have to say @kelalaka, I'm impressed at how good you are at finding duplicates, please keep it going!
 
12:16 PM
@SEJPM thanks. I consider myself having a weak memory. :)
 
1:02 PM
Wow. I just realized we have a tag
which is like the most pointless tag ever
and now it's gone until somebody with 300+ rep recreates it
but if that happens, we'll probably ask to have it blacklisted
 
3 questions and 1 was on hold
 
 
4 hours later…
4:59 PM
1
A: How does a salt get chosen?

Future SecurityTL;DR: Use 16-32 bytes from something like /dev/urandom for your salt. This type of salt best defends against certain types of threats against password hashes. Pairing a unique salt with every password hash is a lot like using a separate hash function for each password. Threat 1: Precomputed Tab...

I made an error regarding Argon2i. Memory access patterns are not salt dependent. (Aside: I don't understand why that's better. Recovering salt from side channels is low risk, probably not practical.) I need to fix it later but don't have time yet. Can I get extra eyes to help me before it gets bumped on the active questions list?
 

« first day (2653 days earlier)      last day (2023 days later) »