Collaborate Disseminate
I’ve configured the following on my IOS XE device.
!
ip ssh rsa keypair-name my-4096rsa-ssh-key
ip ssh version 2
ip ssh server algorithm mac hmac-sha2-512 hmac-sha2-256
ip ssh server algorithm encryption aes256-gcm aes256-ctr
ip ssh server… Continue reading SSH Handshake on Cisco IOS XE
I am trying to utilize the SafeNet eToken 5110CC, which basically has the IDPrime 940MD with the applet 4.4.2.A., to generate ECC keys with lengths 384bits and 521bits to no avail.
The product brief says that ECDSA and ECDH of 384/521bits … Continue reading SafeNet eToken 5110CC w/ IDPrime 940MD: Generating ECC384/521 Errors + ICC/CVC Authentication
After generating an OpenSSH EC key on a hardware security key:
$ ssh-keygen -t ed25519-sk -C comment
Is it possible to use this key with Google Chrome SSH applet or Mosh, in particular on non-Linux machines where there is no ssh command a… Continue reading Is it possible to use an ed25519 security key with Google Chrome SSH applets?
Now that OpenSSH supports Elliptic curve security keys (since version 8.2), it’s possible to generate a ed25519-sk key on a hardware security key:
$ ssh-keygen -t ed25519-sk -C comment
This generates a public and a private key parts. How … Continue reading How sensitive is the primary key stub of an ed25519 security key (~/.ssh/id_ed25519_sk)?
I’m doing some research into secure client-server communication. I’ve decided to use AES to encrypt data, and then encrypt the AES key using ECC to send to the recipient. It’s important to me that I get this flow right, and then I can work… Continue reading Is this key exchange & encryption flow correct? [closed]
I’m doing some research into secure client-server communication. I’ve decided to use AES to encrypt data, and then encrypt the AES key using ECC to send to the recipient. It’s important to me that I get this flow right, and then I can work… Continue reading Is this key exchange & encryption flow correct? [closed]
Can I please get some help in understanding the representation/connection between the issuer key structure, such as the one here:
{
"kty": "EC",
"d": "6RDoFJrbnJ9WG0Y1CVXN0EnxbuQIgRMQfzFVKogbO6c&q… Continue reading Elliptic Curve Encryption Algorithm:ES256, Curve: P-256 Format representations
Some loose reports have indicated that NSA implemented backdoors to some NIST elliptic curves. As far as I understand these do not include P-256, P-384, etc.
From a security standpoint, would it be considered bad practice to use e.g. the c… Continue reading Is the elliptic curve secp256r1 without a backdoor?
I’m attempting to establish a process for setting up a new GPG identity for myself and my threat model.
Much of it is following guides which I believe are still considered best practices:
https://github.com/drduh/YubiKey-Guide
https://bl… Continue reading Why does ECC not have an encrypt capability in GPG, but RSA does?
In Canada, Québec introduced it’s Covid-19 App "VaxiCode" on September 1; BC, "BC Vaccine Card", September 13, requirement in place until January 31, 2022, subject to extension; Ontario, September 22, "app to follo… Continue reading QR codes for shc Covid vaccine passports