Collaborate Disseminate
When dealing with cryptographic secrets (private keys, passwords, etc) it is desirable to not run these secrets through functions that do not run in constant time, in order to avoid the potential for side channel attacks. An example of thi… Continue reading Constant-Time String-to-Byte Encoding for JavaScript
Libsodium builds their KDF on top of BLAKE2b:
BLAKE2B-subkeylen(key=key, message={}, salt=subkey_id || {0}, personal=ctx || {0})
Besides the key, the function has two additional arguments: The subkey ID (a 8 byte value which is 0-padded… Continue reading BLAKE2: What is the difference between the salt and the personalization? [migrated]
I’m building a CA based on the OpenSSL command line tools. I don’t want to use the openssl ca tool and its file based database though, instead I create certificates using the openssl x509 tool directly and assign a random ser… Continue reading Modify Certificate Subject using OpenSSL x509 Command