Collaborate Disseminate
I use hybrid encryption. AES CBC as a symmetric cipher. The key is derived from shared secret using curve25519 (receiver’s public key is known). The sender’s private key is randomly generated, the public key is sent along with the encrypte… Continue reading Is it secure to have constant initialization vector for symmetric block cipher when using hybrid encryption scheme?
$ openssl ecparam -in param-ec.pem -text -noout
ASN1 OID: secp384r1
NIST CURVE: P-384
The file param-ec.pem indicates the curve is P-384, also known as secp384r1.
In the same way:
secp521r1 = P-521 and secp256k1 = P-256 prime256v1 = … Continue reading Why is there an ASN1 OID and a NIST CURVE reference for the same curve?
I use the following command to create your private key and CSR (using the ECC algorithm):
openssl ecparam -out ECC.key -name prime256v1 -genkey -noout
openssl req -new -key ECC.key -out ECC.csr -sha256 -subj "/C=VN/O=Custom Organizati… Continue reading SSL certificate match with private key but doesn’t match with CSR
I have the following private key. I’d like to be able to process it into an instance of ECPrivateKey using Bouncycastle (or the builtin Java security API if bouncycastle isn’t necessary).
—–BEGIN EC PRIVATE KEY—–
MIGTAgEAMBMGByqGSM49… Continue reading What format is this private key in, and how can I process it using bouncycastle?
I’ve configured the following on my IOS XE device.
!
ip ssh rsa keypair-name my-4096rsa-ssh-key
ip ssh version 2
ip ssh server algorithm mac hmac-sha2-512 hmac-sha2-256
ip ssh server algorithm encryption aes256-gcm aes256-ctr
ip ssh server… Continue reading SSH Handshake on Cisco IOS XE
I am trying to utilize the SafeNet eToken 5110CC, which basically has the IDPrime 940MD with the applet 4.4.2.A., to generate ECC keys with lengths 384bits and 521bits to no avail.
The product brief says that ECDSA and ECDH of 384/521bits … Continue reading SafeNet eToken 5110CC w/ IDPrime 940MD: Generating ECC384/521 Errors + ICC/CVC Authentication
After generating an OpenSSH EC key on a hardware security key:
$ ssh-keygen -t ed25519-sk -C comment
Is it possible to use this key with Google Chrome SSH applet or Mosh, in particular on non-Linux machines where there is no ssh command a… Continue reading Is it possible to use an ed25519 security key with Google Chrome SSH applets?
Now that OpenSSH supports Elliptic curve security keys (since version 8.2), it’s possible to generate a ed25519-sk key on a hardware security key:
$ ssh-keygen -t ed25519-sk -C comment
This generates a public and a private key parts. How … Continue reading How sensitive is the primary key stub of an ed25519 security key (~/.ssh/id_ed25519_sk)?
I’m doing some research into secure client-server communication. I’ve decided to use AES to encrypt data, and then encrypt the AES key using ECC to send to the recipient. It’s important to me that I get this flow right, and then I can work… Continue reading Is this key exchange & encryption flow correct? [closed]
I’m doing some research into secure client-server communication. I’ve decided to use AES to encrypt data, and then encrypt the AES key using ECC to send to the recipient. It’s important to me that I get this flow right, and then I can work… Continue reading Is this key exchange & encryption flow correct? [closed]