Collaborate Disseminate
I would like to leverage my SSH keys for encryption my data. Since it is fairly trivial to unlock my SSH key on login, I can easily connect an SSH agent and get my private key rather than have to maintain another passphrase.
If I am usin… Continue reading If I derive an encryption key from an SSH private key, will it be "secure"
Imagine an app where any user provides a username and a password. This password is used to generate a ‘strong’ encryption key (for AES encryption) with the PBDKF2 key derivation algorithm. This encryption key is used to encrypt user data i… Continue reading PBKDF2 hash over PBKDF2 key derivation
keepass is open source on github right? Is there any way to “append” its existing AES256, double the key size, make the program support AES512? What are ways to achieve that result
Thanks
Continue reading How to double the AES keysize in keepass? [migrated]
I am trying to understand how DRM works under the hood. There doesn’t seem to be much information about it on the web so I figured I would ask here.
After some attempted research, I found it extremely difficult to find any … Continue reading How does Widevine, FairPlay, and other DRM’s work under the hood?
In some Java code that I’m reading, I stumbled over the following encryption algorithms passed to the Cipher.getInstance(…) method:
AES/CBC/PKCS5Padding
DESede/ECB/PKCS5Padding
RSA/ECB/PKCS1Padding
Note: In the Java model, the first … Continue reading Are ECB and CBC modes of operation generally insecure?
gpg has some preset default settings, which I assume were selected as a compromise between speed and security. I understand that these are good enough for most people.
But, in a situation where speed / performance was not an… Continue reading gpg: what defaults can be improved, when performance is not an issue?
Assume we have only access to the traffic between two module (Hardware, Software, …) and These modules communicate with SSL (PSK).
Is it possible to assess AES encryption of this traffic?
some features like key length, AES … Continue reading AES Traffic Security Assesment
I am creating a secure network data transfer system, and would like to know if there are any obvious flaws in this scheme.
Secrets
The secret is a password that is known to both clients. This password is never transferred p… Continue reading Is this symmetric key system secure?
For my personal research, I have to create a messaging app, but security is only important part of application, security from MITM (man in the middle attack), at device end, and at server level. (note: this will not end to en… Continue reading Required a simple guide for secure messaging application
I need cryptography advice regarding this issue.
Kamus is a service that encrypts secrets for applications running on Kubernetes. When using AES (actually, Rijndael) symmetric encryption, Kamus uses a single key to encrypt … Continue reading AES Key Derivation algorithm [migrated]