Collaborate Disseminate
What’s the meaning of IV length?
there provide several stream ciphers, what’s the meaning of IV Length?
Name Key Size IV Length
aes-128-ctr 16 16
aes-192-ctr 24 16
aes-256-ctr … Continue reading What’s the meaning of cipher’s `IV Length`?
[CIPHERTEXTSTARTS]HI wsndtonInehbihs if at t iyoncniegtrf .e noionbpni y,iu.w ahoui hs hroyh!euecsy m.ot ew hrc hb;ntsresnmdma ipMsat ln ts , ryiceg ensh c n byr t k t oe de uhw stiytoer s eevlde utln a lerytkhhte ae … Continue reading For a cipher school challenge I need help breaking this cipher [on hold]
E 4W4 QOSEPA NAPCJARAP, ZEJN VCRH JMCQRSPA QAANCKT CK RHPMSTH RHA IPEIFQ MB RHA QRMKA-AZTAZ VEGGQ MB RHA EPIHECI VHCRA VEPZ. EK CPMK – IHAQRAZ TERA, VPMSTHR VCRH E PAZZCQH-LPMVK IMERCKT QNPAEZCKT EIPMQQ RHA QMBR, QCGUAP MB RH… Continue reading I don’t know what cipher/cryptography this is need. But I desperately need to solve it
I want to use TLS version 1.2 and Authenticated Encryption with Associated Data (AEAD).
Can a public key certificate obtained from a certification authority specify which of the ciphers I can use?
Can a public key certificat… Continue reading Whether cipher suites is related to public key certificate?
I want to use TLS version 1.2 and Authenticated Encryption with Associated Data (AEAD).
Can a public key certificate obtained from a certification authority specify which of the ciphers I can use?
Can a public key certificat… Continue reading Whether cipher suites is related to public key certificate?
I’ve seen a lot of articles giving the official explanation on how to prevent OpenSSL Padding Oracles, Usually all of them state that its CBC cipher suites that leave you vulnerable.
The following list works for me, and get… Continue reading OpenSSL Padding Oracle. Specific Ciphers on apache2 seems a little limited
From the OpenSSL Security Advisory
– 0-byte record padding oracle (CVE-2019-1559)
In order for this to be exploitable “non-stitched” ciphersuites must
be in use.
What is a ‘non-stitched’ ciphersuite ?
Multiple vulnerabilities have basically obsoleted TLS_RSA, CBC and QUIC implementations.
February 9, 2019:
“Seven researchers from all over the world found –yet again– another
way to break RSA PKCS#1 v1.5, the most c… Continue reading How to disable obsolete/insecure TLS_RSA ciphers to harden Chrome? [on hold]
Anybody have any input/feedback on this.
I’ve been given the task of researching how to send a ‘secure’ email using SSL on an embedded system with very limited RAM and Flash ROM. The email is very vague in nature, so securi… Continue reading choosing a cipher suite for sending a simple email on embedded systems
I’ve encountered this cipher with a custom name in a particular challenge that encrypts like this:
Rule:
-You cannot have a word that contains the same letter twice, except the first letter which is used to tell the letter… Continue reading Encryption with this cipher seems quite easy, however I cannot decrypt [on hold]