Collaborate Disseminate
I’m trying to make a device that will encrypt and store data. It should require a master password at startup, but then shouldn’t need anything else to decrypt the data throughout the lifetime of the program. It also should be secure, i.e. … Continue reading HSM for Secure Encrypted Data Storage
I have to generate a PGP keypair and share the public key with an external provider. Based on how we already handle it with RSA keypair, we are using the concept of trusted CA which issues certificate to share with providers instead of sha… Continue reading Create a certificate for a PGP key pair [duplicate]
Circom is a circuit language capable of generating zero-knowledge proofs, which involves some input signals and output signals. If all the input and output signals during the generation of the zero-knowledge proof are public, meaning that … Continue reading The issue of public/private signals when generating zero-knowledge proofs with Circom [migrated]
I know that TLS MitM can get HTTP/S traffic decrypted when using certificates.
I’m wondering if it has the ability to decrypt the Apple Airdrop protocol as well as it doesn’t go through a server and uses WiFi Direct to create a peer-to-pee… Continue reading Can a TLS MITM decrypt Apple Airdrop files?
Hi i’m wondering about the security differences between AES Key Wrap and simply encrypting the encryption key with AES-GCM-SIV. What are the advantages of using AES Key Wrap, and what is different under the hood?
Lets say we have an application WebApp where users input confidential data to be sent to Acme Inc’s secure enclave (AWS Nitro in this case) for processing, and the results of this processing are sent back to the WebApp for display.
What wo… Continue reading What is best practice cryptography when it comes to this scenario?
Its known that cipher is made with LFRS. Cipher text is 868 bits long, and its known that the plaintext starts with "Dear Student", therefore we can get the keystream of first 84 bits. However, we do not know anything about the l… Continue reading LFSR, starting with a known sequence [migrated]
Excellent read. One example:
Consider the case of basic public key cryptography, in which a person’s public and private key are created together in a single operation. These two keys are entangled, not with quantum physics, but with math.
When I create a virtual machine server in the Amazon cloud, I am prompted for an RSA public key that will be used to control access to the machine. Typically, I create the public and private keypair on my laptop and upload the public key to Amazon, which bakes my public key into the server’s administrator account. My laptop and that remove server are thus entangled, in that the only way to log into the server is using the key on my laptop. And because that administrator account can do anything to that server—read the sensitivity data, hack the web server to install malware on people who visit its web pages, or anything else I might care to do—the private key on my laptop represents a security risk for that server…
Continue reading Simson Garfinkel on Spooky Cryptographic Action at a Distance
Researchers at Google have developed a watermark for LLM-generated text. The basics are pretty obvious: the LLM chooses between tokens partly based on a cryptographic key, and someone with knowledge of the key can detect those choices. What makes this … Continue reading Watermark for LLM-Generated Text
The FIPS 140-3 10.2.A Pre-operational Integrity Technique Self-test introduces new requirement. Prior to that, in FIPS 140-2, a Power On Self Test was done in order to be able to use a given part of a cryptographic module (e.g. RSA). With … Continue reading rationale for the FIPS 140-3 Pre-operational Integrity Technique Self-test