Collaborate Disseminate
I downloaded an application, based on electron. I then decompiled the app.asar file. And I found two strange files: "server.cert" and "server.key".
The private RSA key corresponds to the certificate.
I was wondering wha… Continue reading Why does this application include a private RSA key?
I have this multiple-part zip files as a list of {File.zip.001, File.zip.002, …, File.zip.013} that happen to be protected by password.
When I try to unzip them using the Gnome GUI, I see click on the first file and can see everything in… Continue reading Unable to open multipart zip with john the ripper
I want to do something really basic but I need to be sure that the process is safe :
Problem
Alice and Bob have to agree on a secret 6 digits PIN. They each have a pre-shared aes symetric key k and a AES-128 block cipher. The PIN will th… Continue reading Is AES ECB mode safe for one block Encryption then MAC with same key?
A user clicked on the link of this email and entered their credentials, thinking the message was legitimate. However, the link didn’t redirect to the fake site, and instead their mail client sent them to the link as it was di… Continue reading How Concerning Is This X-CU-modified: FAKECU Text Attack?
I have a modified version of openssl with a custom TLS cipher that I am testing. How would I use it in Node JS?
I have pointed the modified version of openssl to Node JS using the LD_LIBRARY_PATH.
I have tried specifying th… Continue reading Adding a custom block cipher to Node JS?
In terms of infrastructure, how do Cloud providers (organizations providing SaaS, PaaS, or IaaS via the cloud) manage keys and cryptography?
From my understanding, “private” datacenters tend to manage and offload cryptography with dedicat… Continue reading Key management in cloud datacenters