Collaborate Disseminate
In ASN.1 you’ll have definitions like this:
id-ad-ocsp OBJECT IDENTIFIER ::= { id-ad 1 }
X.680 (page 22) says the following:
Each production consists of the following parts, on one or several lines, in order:
a) a name for the ne… Continue reading what are the valid characters in an ASN.1 name?
There’s a company called irisgalerie that takes high res photographs of your eye and then sells prints to you. So let’s say you got one of these pics and then posted it on social media. Could someone then use that picture to fool eye-based… Continue reading Could high res photographs of eyes be used to fool eye based biometrics?
When I do openssl verify -CAfile signer.crt -untrusted signed.crl I get an unable to load certificates, which I don’t understand as both openssl x509 -in signer.crt -inform PEM -text -noout and openssl crl -in signed.crl -inform PEM -text … Continue reading openssl verify: "unable to load certificates" error
I’m doing a questionnaire for PCI compliance and one of the questions (Yes / No / Not Applicable) is as follows:
All custom application code changes are reviewed (either using manual
or automated processes) prior to release to production … Continue reading is there a two developer minimum for companies seeking PCI compliance?
A former employer of mine has reached out to me to assist them with PCI certification (I guess I’ll be getting a 1099-NEC from them next year as a result). Here’s the point I’m at in the questionnaire:
File-integrity monitoring tools are … Continue reading file-integrity monitoring tools for PCI compliance
Quoting 2017_TLS_Telemetry_Report.pdf:
Not surprisingly, 2048-bit keys now protect 90% of the world’s TLS hosts. The use of 4096-bit keys
have quadrupled, as a share of hosts, but we expect it to start shrinking again a… Continue reading percentage of X.509 certs using rsaEncryption as signature algorithm
RFC4055 describes RSAES-OAEP keys and RSASSA-PSS keys.
OpenSSL’s genpkey utility supports let’s you generate RSASSA-PSS keys (you have to set the aglorithm parameter to RSA-PSS) but if it supports RSAES-OAEP keys the documentation certainl… Continue reading how to generate RSAES-OAEP keys?
I have two websites:
[redacted]
[redacted]
When I visit the first one with Google Chrome 57.0.2987.98 I get a "ERR_CERT_AUTHORITY_INVALID" error. But the second website gives me no such error.
I exported the top level CA cert i… Continue reading two websites with same signing cert but google chrome says CA is invalid for one of them and not the other?
I was testing rc4-40 out with a 200-bit key (25 bytes) and, to my surprise, the results were the same as they were with rc4:
<?php
$key_size = 25;
$key = ”;
for ($i = 0; $i < $key_size; $i++) {
$key.= chr(mt_rand(… Continue reading difference between rc4-40 and rc4 in OpenSSL
In FIPS 186-1 and 186-2 L could be any number between 512 and 1024 (inclusive) that was a multiple of 64. N was fixed at 160.
FIPS 186-3 changed it so that L and N could be any combination of the following:
L = 1024, N = 1… Continue reading Does SSH support DSA with 2048 bit keys?