Mar
27
answered Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
Feb
18
awarded Necromancer
Oct
3
awarded Scholar
Oct
3
accepted Why must curve25519 shared secret be hashed?
Oct
1
awarded Student
Oct
1
comment Why must curve25519 shared secret be hashed?
The shared secret obviously won't be communicated to other parties. It is typically used as the key for a symmetric cipher. Why is spreading out entropy over the bits of a key important? Or it this only relevant if the key is truncated to shorter lengths (thus potentially using only the bits that have less entropy)?
Sep
23
awarded Notable Question
Apr
3
answered How can I encrypt/decrypt 12-digit decimal numbers to other ones, using a password and Java?
Mar
29
awarded Teacher
Feb
24
awarded Popular Question
Dec
8
awarded Teacher
Oct
21
answered Current time in microseconds in java
Jul
20
accepted Challenging challenge: client-side password hashing and server-side password verification
Jul
17
awarded Supporter
Jul
17
awarded Scholar
Jul
17
accepted Recommended # of rounds for bcrypt
Jul
16
comment Recommended # of rounds for bcrypt
@D.W. wrote "please be prepared to listen to the answers you get", sorry if I gave the impression being pedantic or stubborn. Perhaps as a non-native English speaker my comments conveyed the wrong message. I do appreciate all answers, and try hard to understand the rationale behind them.
Jul
16
revised Challenging challenge: client-side password hashing and server-side password verification
added 302 characters in body
Jul
16
comment Recommended # of rounds for bcrypt
I have a hard time understanding the reasoning that my platform determines the amount of hashing rounds. A client-side Javascript bcrypt implementation can do about 2^6 rounds on a legacy mobile device, my most recent hardware can do 2^13 rounds. However, you commented elsewhere that "12 rounds is almost certainly not enough". How can the speed of my implementation be relevent? Perhaps this just means I need to buy faster hardware and can't run a secure website on an old Pentium 4 which does 2^4 rounds?
Jul
15
comment Recommended # of rounds for bcrypt
Ah, I thought 2^(current_year-2000) was just an arbitrary example. Ok, so 12 rounds in 2012.
1 2 3