Shared thoughts after 6 years in Pentesting

Re:Shared thoughts after 6 years in Pentesting by arvinsim on Monday June 26, 2017 @05:18AM (#14635278)

> Learn some advanced mathematics and cryptography.

There is too much of mathematics to learn all of them. To make maximize, I think I need to focus on some subjects that would be cost-effective. What woulds would this be?

[ Parent | on HN ]

Re:Shared thoughts after 6 years in Pentesting by baby on Monday June 26, 2017 @10:39AM (#14637129)

Just learn what you need:

https://gist.github.com/tqbf/be58d2d39690c3b366ad

[ Parent | on HN ]

Re:Shared thoughts after 6 years in Pentesting by lou1306 on Monday June 26, 2017 @10:52AM (#14637229)

Sorry, could anyone enlighten me on the "Avoid ElGamal" part? I thought it was pretty secure. Is it due to bad efficiency?

[ Parent | on HN ]

Re:Shared thoughts after 6 years in Pentesting by dozzie on Monday June 26, 2017 @11:03AM (#14637335)

I would guess the author wanted to say "avoid cryptosystems that work over Z_n ring", especially that you will use ElGamal when signing or encrypting over elliptic curves.

[ Parent | on HN ]

Re:Shared thoughts after 6 years in Pentesting by baby on Monday June 26, 2017 @12:28PM (#14638001)

It is fine, but a good reason to avoid FFDH, RSA and other algorithms over multiplicative groups is that you need longer parameters compared to ECC.

[ Parent | on HN ]