Collaborate Disseminate
We want to replace traditional signature of papers by digital signature in our organazation. The process is simple:
A signs the data using his/her private key which is saved inside a secure RFID card. for this we need some biometric solut… Continue reading PKI digital signature technologies
How do I generate SSH keys inside my yubikey, on Ubuntu?
There seems to be nowhere to look for this info.
Suppose I have a software which I sell to customer to use. I want to include a license that will be expired in let’s say 1 year, so that customer need to renew their package.
I want to prevent the user (customer) from trying to bypass the … Continue reading How to license an offline software that automatically expired in the given amount of time?
I have a lot of binary files that contain some data that is signed using CMS.
The files have the form:
$ openssl cms -inform DER -in test.cms -cmsout -print
CMS_ContentInfo:
contentType: pkcs7-signedData (1.2.840.113549.1.7.2)
d.signe… Continue reading Strip CMS Signature from file (using openssl?)
I want to use symmetric encryption to create a digital signature.
What can be the possible scenarios where symmetric encryption is used to create digital signatures?
When a Windows .exe installer is code-signed, I thought that modifying a single byte (thus changing its SHA256 hash) would make the digital signature invalid, but surprisingly, this is not true.
Indeed, as reported two days ago in Each Fir… Continue reading How can a .exe be modified and still keep a valid digital signature?
When explaining the concept of signing a message, often it is presented as "encrypting with your private key", so that somebody who has the public key can "decrypt" the signature and verify it. However, PGP signatures (… Continue reading PGP "real" encryption with private key
Could it be practical to authenticate API request through digital signature (based on headers and message body)? This would be asymmetric instead of something like HMAC which is not a signature. Are there performance or other constraint… Continue reading Digital signature for API authentication feasible?
Much of the promise associated with future digital identity infrastructures is associated with greater automation of the identity lifecycle and the provision of greater control of personal data to end-users. But automation also has the potential to red… Continue reading Does the future of digital identity offer us greater security and convenient experiences?
I’m not using an identity provider. I have a small system with access and refresh tokens and it works well.
Assume the system follows the "typical" approach:
when user authenticates or refreshes: he gets a new refresh token
refr… Continue reading Should refresh tokens be signed?