Encryption/decryption at client or server side with hybrid cryptosystem?

I’ve read a lot of documentations about encryption in the last weeks and I think I now have a good idea of what system I will use for my project (standard hybrid cryptosystem using RSA/AES). However, there is still an unanswered question a… Continue reading Encryption/decryption at client or server side with hybrid cryptosystem?

Is using SHA256 to create 256bit secret key from bcrypt good ok?

I am trying to Use AES to store passwords for a password manager. For authentication I am already using bcrypt. As AES uses 256 bit Key can I use SHA256 to generate 256 bit key from hashed value of bcrypt(Not talking about hash saved in Db… Continue reading Is using SHA256 to create 256bit secret key from bcrypt good ok?

Curve25519 vs. Curve25519 and AES Key vs. Curve25519 AES Ciphertext (Instagram)

I am trying to send a password from a client to the server. I just don’t know how to encrypt it.

method:
I used a website (Instagram) as a guide here.
Here the password is encrypted with AES and the key is then encrypted with a Curve25519… Continue reading Curve25519 vs. Curve25519 and AES Key vs. Curve25519 AES Ciphertext (Instagram)

Why is a password encrypted with AES and then sent back to the server together with the key with RSA (Instagram)?

I am trying to understand an encryption process on a website (Instagram). As far as I know, a public key is sent from the server to the client. Then the password is encrypted with AES_GCM_256 and packed together with the AES key in an arra… Continue reading Why is a password encrypted with AES and then sent back to the server together with the key with RSA (Instagram)?