Collaborate Disseminate
Backstory
The system I’m designing requires encrypted messages as well as message authentication. AES-GCM seems like the logical choice due to its authentication capabilities and high throughput.
The key used to encrypt a m… Continue reading What differs the authenticity provided by RSA signing and AES-GCM?
I found this statement
In RSA crypto, when you generate a key pair, it’s completely arbitrary which one you choose to be the public key, and which is the private key. If you encrypt with one, you can decrypt with the other – it works in b… Continue reading RSA Digital signatures vs "encryption with the private key"
I applied to take over a friends lease vehicle because they are moving to Europe, and received an email from the vehicle manufacturers lease department, asking that I submit a color copy of my U.S. Social Security Card.
So I’m currently testing a site that has a url like this
example.com/dir1/dir2?nextPage=/someOtherDir/someHTMLfile.html
I found that I can do to get to the home page
example.com/dir1/dir2?nextPage=../../
or I can read f… Continue reading Is this considered directory traversal?
I know there are some tricks to play with wildcards to make a certificate to be valid for all the subdomains ( such as here), but my question is what is the design reason that certificates can be issued for subdomains. Why so… Continue reading Why one may want to get different certificates for different subdomains?
The Problem
In our system users are identified by a composite key. We’d like to devise a scheme to deterministically convert this composite key into a UUID.
Solutions?
The obvious first suggestion would be UUIDv5, however:
It’s based … Continue reading How to reasonably hash a composite key into a UUID?
For a software registration code, I would like to sign a phone number of around 14 digits with a private key and then check it in an app.
I would imagine to use RSA or something but the signature should be typed in manually … Continue reading Choosing a more or less secure signature algorithm with very short signature length
I recently got an USB keyboard. I want to investigate if the microcontroller of the keyboard may host a keylogger and how could it interact with a Windows OS. My understanding is that, once Windows recognizes the USB device, it will get th… Continue reading How to detect a keylogger in a USB keyboard? Can a USB keyboard host a keylogger?
I am theoretically thinking about automatically unlocking the house door via smart phone. Without the need to fiddle with the smart phone (opening an app, pressing a button).
There is a commercially available locking/unlocki… Continue reading Securely determine my smart phone’s position (in front of the door)
TCP- or UDP-based Port Scan Count: 5313
This is what comes up in the firewall “local log”.
The source is from 209.18.47.61