Collaborate Disseminate
please verify or explain how to do this properly.
I’m letting a user create keys from the client through a secure server.
I ask the user for a password on the client, then send the hashed password to the server. The server generates fresh … Continue reading Asymmetrical scheme: insecurity concerns of saving a hash of a hash of a password
only lock == public key
only open == private key
both open and lock == regular key
What here is symmetric, or asymmetric here, if at all?
Continue reading What is symmetric or asymmetric in public and private keys? [closed]
When using asymmetric encryption, signing and encryption are the same, but opposite, operations.
Say I have my drive encrypted with asymmetric encryption.
If I save a signed file to that drive, using the same key, would that file be in the… Continue reading Saving signed file on an encrypted drive using symmetric encryption
Let’s say I have access to a "signing server", similar to an HSM. It has a private key internally that should never leave the server. I can (in a secure way, this shouldn’t matter here) ask the server to sign any data using the p… Continue reading Encrypt using signature as symmetric key
In Tor, when a client communicates with an entry node, they exchange the parameters such as the prime number and the generator with each other through DH.
What about when an entry node communicating with a middle node, or a middle node com… Continue reading Tor: How does entry nodes communicate with middle nodes? How does middle nodes communicate with exit nodes?
Session keys are generated during TLS handshake and are transferred from clients to server through asymmetric encryption FOR ONCE.
However, I have heard that session keys are single-use, which mean a new set of session keys are going to be… Continue reading How are session keys transferred between a client and a server?
Because of all the problems associated with "roll-your-own cryptography", I am looking for an existing standard for standalone authentication using asymmetric keys.
Scenario/threat model
Machine-to-machine connections between ser… Continue reading Standard for public-key authentication (separate from channel encryption)
Because of all the problems associated with "roll-your-own cryptography", I am looking for an existing standard for standalone authentication using asymmetric keys.
Scenario/threat model
Machine-to-machine connections between ser… Continue reading Standard for public-key authentication (separate from channel encryption)
I was thinking of using gpg4win to encrypt files I’ll upload to cloud storage services. I already use 7-zip so if I just wanted to password protect my files I could have easily done it, but I wanted to implement TLS style asymmetric encryp… Continue reading GPG4WIN Kleopatra does not require RSA secret key components to decrypt
I was thinking of using gpg4win to encrypt files I’ll upload to cloud storage services. I already use 7-zip so if I just wanted to password protect my files I could have easily done it, but I wanted to implement TLS style asymmetric encryp… Continue reading GPG4WIN Kleopatra does not require RSA secret key components to decrypt