Collaborate Disseminate
Is there any cipher suites supported in one TLS version and not supported in the other? If yes, then is there any documentation that talks about the cipher suites supported in each TLS or SSL versions?
Continue reading How do I get the list of cipher suites supported in a specific TLS version?
How can I get started on understanding how to decipher this ciphertext when I don’t know the algorithm or key used?
TDcbY xqCa NeAA OsWMirK FNFOm bYRUYAkxl, tqwl axZU XTaLrBSFv OI G vWjBZyqhz.
SUze pGUqZi fCxHFbaIK QnY n… Continue reading Deciphering ciphertext with an unknown key and algorithm [on hold]
If you select the modern profile in https://mozilla.github.io/server-side-tls/ssl-config-generator/ , you can see it recommends to enable following four cipher suites also.
ECDHE-ECDSA-AES256-SHA384 ( =
TLS-ECDHE-ECDSA-WIT… Continue reading Is there any CBC based ciphersuite which are secure for known attacks like LUCKY13?
What does the number used in cipher suites next to the symmetric encryption algorithm reefers to? Does it mean each block is divided into 128 bit blocks, the key size or both ?
Continue reading aes-128 refers to the block size, key or both
I have just performed a test on my personal webiste via SSLlabs.com and I’m apparently supporting some weaker ciphers. I’ve managed to improve several settings (like CAA), but I’m getting stuck at the ciphers.
I’ve been looki… Continue reading How do I know which cipher suites can be disabled?
I ran a vulnerability scan and I got these results for ports 993, 995, and 5432. I am running Dovecot for POP3S and IMAPS and Postgres for port 5432. I got these results from the vulnerability scan:
Summary:
This routine rep… Continue reading How do I fix: SSL/TLS: Report Weak Cipher Suites for Ubuntu Server [on hold]
I have many ssl certificates.
On one of the certificates I run the command openssl x509 -in cert.pem -text -noout
it shows:
Signature Algorithm: ecdsa-with-SHA256
Public Key Algorithm: id-ecPublicKey
Based on the info fro… Continue reading How to filter ciphers based on ssl certificate?
I have written a message and encrypted it using cipher block chaining.
What will happen if the receiver loses the Initialization Vector, or doesn’t receive at all?
Continue reading Losing the Initialization Vector in Cipher Block Chaining
I recently came across a tech professional advising a user to take some plaintext of their choice, run it through one of these ciphers, convert it to Base64, and then use the result as their master password on LastPass.
Howe… Continue reading Do ciphers and encoding schemes make passwords more secure?
We often hear of AES-128-CBF and AES-128-GCM, but what’s the difference between them?
Continue reading What’s the difference between `aes-128-cbf` and `aes-128-gcm`?