Collaborate Disseminate
[CIPHERTEXTSTARTS]HI wsndtonInehbihs if at t iyoncniegtrf .e noionbpni y,iu.w ahoui hs hroyh!euecsy m.ot ew hrc hb;ntsresnmdma ipMsat ln ts , ryiceg ensh c n byr t k t oe de uhw stiytoer s eevlde utln a lerytkhhte ae … Continue reading For a cipher school challenge I need help breaking this cipher [on hold]
E 4W4 QOSEPA NAPCJARAP, ZEJN VCRH JMCQRSPA QAANCKT CK RHPMSTH RHA IPEIFQ MB RHA QRMKA-AZTAZ VEGGQ MB RHA EPIHECI VHCRA VEPZ. EK CPMK – IHAQRAZ TERA, VPMSTHR VCRH E PAZZCQH-LPMVK IMERCKT QNPAEZCKT EIPMQQ RHA QMBR, QCGUAP MB RH… Continue reading I don’t know what cipher/cryptography this is need. But I desperately need to solve it
I want to use TLS version 1.2 and Authenticated Encryption with Associated Data (AEAD).
Can a public key certificate obtained from a certification authority specify which of the ciphers I can use?
Can a public key certificat… Continue reading Whether cipher suites is related to public key certificate?
I want to use TLS version 1.2 and Authenticated Encryption with Associated Data (AEAD).
Can a public key certificate obtained from a certification authority specify which of the ciphers I can use?
Can a public key certificat… Continue reading Whether cipher suites is related to public key certificate?
I’ve seen a lot of articles giving the official explanation on how to prevent OpenSSL Padding Oracles, Usually all of them state that its CBC cipher suites that leave you vulnerable.
The following list works for me, and get… Continue reading OpenSSL Padding Oracle. Specific Ciphers on apache2 seems a little limited
From the OpenSSL Security Advisory
– 0-byte record padding oracle (CVE-2019-1559)
In order for this to be exploitable “non-stitched” ciphersuites must
be in use.
What is a ‘non-stitched’ ciphersuite ?
Multiple vulnerabilities have basically obsoleted TLS_RSA, CBC and QUIC implementations.
February 9, 2019:
“Seven researchers from all over the world found –yet again– another
way to break RSA PKCS#1 v1.5, the most c… Continue reading How to disable obsolete/insecure TLS_RSA ciphers to harden Chrome? [on hold]
Anybody have any input/feedback on this.
I’ve been given the task of researching how to send a ‘secure’ email using SSL on an embedded system with very limited RAM and Flash ROM. The email is very vague in nature, so securi… Continue reading choosing a cipher suite for sending a simple email on embedded systems
I’ve encountered this cipher with a custom name in a particular challenge that encrypts like this:
Rule:
-You cannot have a word that contains the same letter twice, except the first letter which is used to tell the letter… Continue reading Encryption with this cipher seems quite easy, however I cannot decrypt [on hold]
Is there anything against this TLS-configuration in Apache:
SSLProtocol TLSv1.2
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256
There are lots of examples that use a more complicated setup, but I believe this configuration is b… Continue reading Apache TLS with only ECDHE-RSA-AES128-GCM-SHA256 enabled