Stack Exchange

Thomas Pornin

Quebec City, Canada

bolet.org/~pornin

Age: 37

Cryptographer, programmer in several languages (C, Java, several assemblies, Pascal, Forth...). I also have a life.

top accounts reputation activity favorites subscriptions
Top Questions
Top Answers
319
CRIME - How to beat the BEAST successor?
security.stackexchange.com

193
Are passwords stored in memory safe?
security.stackexchange.com

172
Do any security experts recommend bcrypt for password storage?
security.stackexchange.com

136
How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
security.stackexchange.com

111
How do certification authorities store their private root keys?
security.stackexchange.com

107
XKCD #936: Short complex password, or long dictionary passphrase?
security.stackexchange.com

98
How does SSL work?
security.stackexchange.com

82
Is SHA-1 secure for password storage?
stackoverflow.com

61
CTRL+ALT+DEL Login - Rationale behind it?
security.stackexchange.com

60
How does SSL work?
security.stackexchange.com

59
How to securely hash passwords?
security.stackexchange.com

57
Why do people think that this is bad way to hash passwords?
security.stackexchange.com

49
What's the difference between SSL, TLS, and HTTPS?
security.stackexchange.com

47
How do whisky stones keep your drink cold?
physics.stackexchange.com

46
Amount of simple operations that is safely out of reach for all humanity?
security.stackexchange.com

46
Is it safe to ignore the possibility of SHA collisions in practice?
stackoverflow.com

46
Comparison of DES, Triple DES, AES, blowfish encryption for data
stackoverflow.com

42
Certificate based authentication vs Username and Password authentication
security.stackexchange.com

41
What is the most secure seed for random number generation?
stackoverflow.com

40
Is a rand from /dev/urandom secure for a login key?
security.stackexchange.com

40
Why do we not trust an SSL certificate that expired recently?
security.stackexchange.com

40
Best way to reduce chance of hash collisions: Multiple hashes, or larger hash?
crypto.stackexchange.com

39
Garbage collector in Android
stackoverflow.com

38
“Real” Salt and “Fake” Salt
security.stackexchange.com

37
Recommended # of iterations when using PKBDF2-SHA256?
security.stackexchange.com

37
As a beginner in IT Security, should I learn TCP/IP?
security.stackexchange.com

37
Does overlaying the mouse on a virtual numeric keyboard really protect against keyloggers?
security.stackexchange.com

35
Is authentication using personal pictures more secure than passwords?
security.stackexchange.com

34
Password Hashing add salt + pepper or is salt enough?
security.stackexchange.com

34
NSA Suite A Cryptography: Security through obscurity?
security.stackexchange.com

1 2 3 4 5 … 10