/explore
|
You are here |
www.schneier.com | ||
| | | | |
specbranch.com
I have recently been immersed in the theory and practice of random number generation while working on Arbitrand, a new high-quality true random number ... |
|
| | | | | ||
| | | | |
freedom-to-tinker.com
You may have seen the preprint posted today by Lenstra et al. about entropy problems in public keys. Zakir Durumeric, Eric Wustrow, Alex Halderman, and I have been waiting to talk about some similar results. We will be publishing a full paper after the relevant manufacturers have been notified. Meanwhile, we'd like to give a more complete explanation of what's really going on. We have been able to remotely compromise about 0.4% of all the public keys used for SSL web site security. The keys we were able ... |
|
| | | | | ||
| | | | |
paragonie.com
A lesson on cryptographically secure pseudorandom number generators in PHP, and how to generate random integers and strings from a high quality entropy source like /dev/urandom to generate secure random passwords in PHP. |
|
| | | | | ||
| | | | |
www.morling.dev
27 years of age, and alive and kicking?-?The Java platform regularly comes out amongst the top contenders in rankings like the TIOBE index. In my opinion, rightly so. The language is very actively maintained and constantly improved; its underlying runtime, the Java Virtual Machine (JVM), is one of, if not the most, advanced runtime environments for managed programming languages. There is a massive eco-system of Java libraries which make it a great tool for a large number of use cases, ranging from comman... |
|
| | | |||