Collaborate Disseminate
I have read that GCM is almost always more secure than CBC when implemented correctly.
However, in the documentation of NodeJS, CBC is being used as an example instead. The key-pair will be stored in the node environment.
… Continue reading Why does the NodeJS Crypto docs use CBC instead of GCM for RSA key-pair?
I know that
In cryptography, the linearization attack is a method of cryptanalysis
for block ciphers
I am looking for an example of linearization attack couldn’t find it online
Could anyone please explain it with an … Continue reading What is linearization attack [migrated]
I want to start off by saying that I am not an expert in regards to networking or Wireshark but I do have a background in web development, particularly .net and iis/windows server.
I am trying to add a couple of ciphers in … Continue reading Expected Cipher Suites not showing in packet traces – Handshake Failure [migrated]
Let’s say that a substitution cipher had 52 symbols instead of 26. For this, we would include all lower case and upper case letters. This creates a key space of 52! wehere the cipher text can contain both lowercase and upperc… Continue reading Does adding more letters provide added security compared to a standard substitution cipher?
I am a newbie to block cipher and when learning the CBC mode, I start to understand that an IV is being used in this mode and also will be transferred to the message receiver.
So here is my question, what if the IV is tampered? CBC mode … Continue reading What if the attacker tamper the IV used in the block cipher CBC mode?
This question is similar to this one, so let me elaborate what I’m struggling with.
I want to get the length/strength of the key used by the server during the key exchange and authentication, i.e. public key size for RSA, pr… Continue reading TLS key exchange and certificate subject public key clarification
This question already has an answer here:
x509: must the signature algorithm and public key algorithm match?
1 answer
When i use Openssl to connect to facebook.com I see ‘ECDHE-ECDSA-AES128-GCM-SHA256’ ciphersuite used.
openssl s_client -connect www.facebook.com:443
SSL handshake has read 3280 bytes and written 373 bytes
—
New, TLSv1/SSL… Continue reading Openssl using the cipher parameter result in handhsake failure
Can users actually use the 3DES cipher to connect to a Tomcat web server, if the 3DES cipher has been disabled via registry keys in Windows:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphe… Continue reading 3DES supported in application although disabled in Windows
This question already has an answer here:
How to determine what type of encoding/encryption has been used?
8 answers
7363… Continue reading Help me to identify what type of string it is? [duplicate]