Collaborate Disseminate
gpg has some preset default settings, which I assume were selected as a compromise between speed and security. I understand that these are good enough for most people.
But, in a situation where speed / performance was not an… Continue reading gpg: what defaults can be improved, when performance is not an issue?
I am working on an assignment and I need to know why does CA need a private key.
Can I have a CA without a private key?
Continue reading Why must a CA have a private key? [on hold]
This question already has an answer here:
How does SSL/TLS work?
3 answers
Does the SSL record protocol encrypt the handsha… Continue reading What are the exact steps to establish a HTTPS (HTTP+SSL/TLS) connection? [duplicate]
Background:
This is the architecture of the platform I’m working on:
The API has several secured endpoints for accessing the database. Users log in on the Front End with their credentials, and if they’re valid the API retu… Continue reading How can user-less servers be authenticated without sharing secret data?
We have a client server system implemented. Where client communicates using HTTP request. We have a one time token based authentication system and also sign the URL for authenticity.
We do the signature verification of the U… Continue reading Digital signature verification with Client Certificates
I was learning about the Asymmetric key cryptography. As I understand, if someone has the public key of the private-public key pair, it can be used to send or receive data from either end. How is it secure then?
Continue reading How is Asymmetric cryptography secure if someone steals the public key? [on hold]
I’m not quite sure if I understood integrity deep enough.
Let’s suppose that Alice and Bob are using a public-key algorithm and using signatures to assure their data integrity. A hacker was able to get their private keys, an… Continue reading Does Integrity assures protection from unauthorized read, without any modification?
I see that some projects like KeepassXC use CR based OTP to provide some additional security. While this is discussed quite controversial my opinion is that – for quite some cases (e.g. most non-targeted attacks as of today) … Continue reading Is there any Password Manager that supports Hardware-Based OTP encryption/decryption?
(I am not a cryptography expert; I do write software)
I am working with some youth (ages 11-13) and wanted to explore for an hour or so some basic cryptography. Doing symmetric ciphers is pretty straightforward. It’s easy to… Continue reading In search of a pedagogically simple example of asymmetric encryption routine? [migrated]
I’m developing an application which will need to derive a private/public key pair from a user provided password, and then use the public key to encrypt some text (up to 1000 characters in length) such that it can only be decr… Continue reading Most secure algorithms for KDF and Public Key Encryption