Collaborate Disseminate
Use of digital certificate for signing the files which are auto-generated by the applications that belong to a sister-concern entity that is into products/services to the other sister-concern entity which is into Finance.
Is this something… Continue reading Digital signing of invoices when exchanged between entities [closed]
As I understand, code obfuscation is used to make reverse engineering difficult/hard for the adversaries/red team.
Now if I use a source code obfuscator where a .C/.CPP file is used as input and an obfuscated .C/.CPP file is generated, sho… Continue reading Code obfuscation and source code repositories
For an embedded IoT product running linux, digital signature validation of new firmware package is performed by a startup script file. For maintenance and troubleshooting purposes, the product does support a user account. As in the case of… Continue reading Obfuscation of scripts
What are the best practices to be followed to maintain security in the manufacturing site where camera phones are allowed?
I’m working on one of the largest manufacturing facility where few of the R&D/IT/HR team sits in the same shop f… Continue reading Allow the use of camera phones in the manufacturing facilities; but then how do I maintain the security of the premises
I have recently moved to the manufacturing sector to take care of security of systems/products, specifically operational technology (OT) products. Based on a recent US CISA advisory, I had to apply a patch to multiple units of the same se… Continue reading Patching operational technology products in a manufacturing assembly line?
Are there any guidelines for making use of attached signatures and detached/embedded signatures?
What are the pros and cons of these approaches and what are the selection criteria?
Continue reading cryptography – attached signature and detached signatures? [closed]
Are there any guidelines for making use of attached signature and detached signatures? Are both of these governed by IETF standards?
What are the pros and cons of these two formats?
I came across enveloping signature and enveloped signatur… Continue reading signing of software/firmware for authenticity and integrity checks [closed]
I have environmental constraints where the cyber and safety functions are segregated such that safety operations are handled by one unit and cyber operations such as firewall, HIDS, secure storage etc. are handled by another unit that is s… Continue reading double hashing for code signing and verification
While NIST mentions only the hashing algorithms for use in cryptography, there is lack of clarity specifically for password hashing algorithms.
Does anyone know are there any algorithms approved by NIST for password hashing?
Also, I could … Continue reading support for adaptive password hashing algorithms [closed]
Assuming a product shelf life of 30 years and the product which is released now in 2021, what is the recommendation/suggestion for hashing or encryption algorithms to use in the product?
That means, should I directly make use of the superi… Continue reading Security of hashing and encryption algorithms for 30 years