Collaborate Disseminate
What are the differences between the CIS hardened linux and SELinux(security linux)? Also, all the public cloud service providers support CIS hardened linux. Does it mean SELinux has lost the battle? Or in terms of security, which flavor s… Continue reading CIS hardened linux vs SELinux(Security Enhanced)
We are currently working on an IoT product & having a hard time coming up with a strategy to create a unique password for each device/unit.
I do understand that password based on a function of { serial number, CPU id, MAC address or ti… Continue reading Creating a unique password for each device/unit of the same product
Does anyone know about the search mechanism used in OpenSSL w.r.t verifying a serial number against a CRL file?
I understand that in the case of Base-CRL approach, the file size will grow over time and also it depends upon the number of re… Continue reading OpenSSL and connection time
I’m new to virtualization and hypervisor environment. Is it possible to use PKCS#11 interface in virtual machines that are managed by a hypervisor such as Xen or similar? This question is that in a hypervisor environment, virtual TPM is wh… Continue reading PKCS#11 interface to work with Virtual TPM
I came across SoftHSM2 from OpenDNSSec(BSD license) which is a drop-in replacement for HSM except that SoftHSM2 only lacks physical security. Also, being the fact that PKCS#11 is the standard interface to work with both SoftHSM2 and HSM/TP… Continue reading Use of SoftHSM2 in commercial products
What is the best place to store certificates and keys which are confidential and sensitive?
As I understand LUKS is fine and kernel transparently handles encryption/decryption. Also, the LUKS volume could contain anything and everything li… Continue reading Better security for storing certificates in LUKS or softhsm?
I’m developing a safety product and asked to enable secure communication support to work with maintenance application running on a host pc and to work with third-party products.
So Do I need to have two certificates in my product one with … Continue reading One product unit needs one or two x.509 certificate
I have come across many security keys from different manufacturers such as solokeys, yubico etc.., for the purposes of 2FA/MFA. Products vary basically w.r.t features such as USB-A, USB-C, Apple connector or NFC. But, I could not still fig… Continue reading Push button in Security key used for 2FA/MFA
From the definition of key escrow (a method to store important cryptographic keys providing data-at-rest protection), it sounds very similar to that of secure storage which could be basically software-based or hardware-based (TPM/HSM).
But… Continue reading key escrow vs secure storage(software/TPM/HSM)
Does the CA need to mandatorily publish the new CRL file even though there are no new certificates that have been compromised since the last CRL published?
If CA needs to publish the CRL’s periodically, how do I identity whether there are … Continue reading Practical usage of CRL(Certificate Revocation List)