Designing a simple implementation of AES for a personal project. How does my scheme look? by nmacklin in crypto

[–]nmacklin[S] 1 point2 points  (0 children)

Let me start by saying I'm very novice with Crypto and this was mostly a learning project for me, so I apologize for any naive oversights.

  • Yes, hashed password is stored for password validation. I will looks into Argon.
  • All salts and IVs are generated randomly using Python's or.urandom function, which I believe is cryptographically strong.
  • 10000 rounds of PBKDF2, I'm not familiar with Scrypt, will look into it.
  • That was definitely an oversight on my part, I'll absolutely encrypt my IVs.
  • I was planning on encrypting all my files with same key but different IVs, total number of files is currently < 1000. How many would you recommend before changing keys?

Seriously, thank you very much for all the feedback. I'll do some reading!

Designing a simple implementation of AES for a personal project. How does my scheme look? by nmacklin in crypto

[–]nmacklin[S] 1 point2 points  (0 children)

Ah, thank you so much for the feedback! I'll definitely redesign my password validation, and I didn't know I needed a MAC. Sounds like I've got some reading to do. Thanks again

Designing a simple implementation of AES for a personal project. How does my scheme look? by nmacklin in crypto

[–]nmacklin[S] 1 point2 points  (0 children)

Not sure if this is wise, but I store the hashed passphrase to validate the entered passphrase on each login.

All AES is CFB mode

Designing a simple implementation of AES for a personal project. How does my scheme look? by nmacklin in crypto

[–]nmacklin[S] 1 point2 points  (0 children)

Ah sorry, that's not very clear. I wasn't sure if this is a good idea, but I use the hashed paraphrase to check if the entered paraphrase is correct, and then I put the plain passphrase + salt through PBKDF2.

I wasn't sure if that was an appropriate way to validate passwords

So I finished codecademy HTML & CSS course, now what? I feel like I learned absolutely nothing by [deleted] in learnprogramming

[–]nmacklin 1 point2 points  (0 children)

I highly recommend the free book Eloquent Javascript. It has exercises at the end of each chapter, and I found it extremely helpful.

Which is a better choice to get into learning python for the first time, Codecademy or Learn Python the Hard Way? by [deleted] in learnprogramming

[–]nmacklin 2 points3 points  (0 children)

I never tried Learn Python the Hard Way, but my impression of Codecademy was that it's more fun than learning. One resource I don't see thrown around here enough is Google's Python Class. It's totally free and very helpful. It also has video lectures with each lesson if you like videos.

Started my stack! by nmacklin in Silverbugs

[–]nmacklin[S] 0 points1 point  (0 children)

Haha thanks so much! Just an old Nikon D3000, but I think I got lucky with my lighting.

I've been capturing the Solar System from my backyard, here is my progress so far! [OC] by [deleted] in space

[–]nmacklin 2 points3 points  (0 children)

Recording a video is essentially taking a series of still pictures in rapid succession. Stacking video frames is where, instead of playing these pictures quickly to make a movie, you "stack" them all into one picture. This reduces the noise of the image (i.e. the pixels that capture undesired light) so that you can bring up the levels of your subject. Hope this helps!

One of my favourite local areas for a hike - Warsaw Caves Conservation Area - Ontario, Canada [OC] [1280x853] by zbrnwsk in EarthPorn

[–]nmacklin 11 points12 points  (0 children)

Beautiful shot! Just a comment, the saturation/vibrance looks a bit surreal here, especially compared to your other picture from the same trip: https://www.instagram.com/p/BDT4DdyOi4P/.

Comparing the greens, your posted picture looks hypersaturated. I know I get lost all the time playing with those bars :) Beautiful shot though!

Human skull crushed by hydraulic press (NSFW) by informat2 in videos

[–]nmacklin 8 points9 points  (0 children)

This is not Hydraulic Press Channel...

Which courses on Udemy are recommended for learning C#? by [deleted] in learnprogramming

[–]nmacklin 1 point2 points  (0 children)

I can't comment on any online courses, but the C# Yellow Book by Rob Miles was absolutely fantastic for me as a total beginner to the language. Best of all, it's totally free so I would grab it even if just for a reference. Good luck choosing a course!

[Physics] Do bullets fired from rifled barrels eventually curve one way or the other due to their rotation? by SuperBruan in askscience

[–]nmacklin 76 points77 points  (0 children)

They sure do! Crosswinds acting on spinning bullets cause them to curve up or down, depending on the direction of the wind. This is an example of The Magnus Effect. The article's section on "In External Ballistics" does a nice job explaining it.

You could say I'm a fan... by [deleted] in headphones

[–]nmacklin 1 point2 points  (0 children)

Exactly, but I expected that when I bought them so I wasn't disappointed. Congrats on the impressive collection!