Collaborate Disseminate
I am working on an older software for a company at the moment and in my work have been upgrading a number of libraries. The app connects to a web service hosted by the third party payment processor, and in doing so it must create a digital… Continue reading Strange keystore from payment processor
I have noticed that a number of network packet monitoring tools on the market today seem to have roughly the same recommended configuration parameters as described below:
https://help.deepsecurity.trendmicro.com/10/0/Protect… Continue reading How can disabling Diffie-Hellman cipher for packet inspection be secure?
I am currently formulating security best practices and requirements for ongoing Java software development in my department and have settled with a recommendation of using the Jasypt framework for encryption/decryption of serv… Continue reading Protecting the password in a PBE scheme for an application
I am evaluating requirements for delivering a secure application design on a PIN management system. The context behind the need for it is that PINs are generated and securely mailed to clients for purposes of authentication … Continue reading Secure solution for unique PIN generation to external clients
I am currently researching best practices in designing a potential PIN management solution for a financial services application and began looking into ISO 9564 as a source of requirements.
One of the things that popped into … Continue reading ISO 9564 Approved Encryption Algorithms for PIN, why symmetric block ciphers?