Collaborate Disseminate
Background information:
I am not a computer scientist. However, in a research project I am currently building a ESP32-based sensor. Multiple sensors of this type are going to be used by multiple users.
Every time a user wants to utilize a … Continue reading ESP32: Secure WiFi credentials via WebCrypto?
I generated my self signed certificate using openssl and I chose ECC keys (prime 256v1) for root certificate but while authenticating with the server i.e. IBM cloud and my device the negotiated cipher suite was TLS-ECDHE-RSA-WITH-AES-128-G… Continue reading What is the relation between cipher suite and certificate? [duplicate]
I’m trying to generate a X509 certificate with an EC public key but an RSA signature. I’m using OpenSSL like this:
openssl genpkey -algorithm EC -out ec256key.pem -pkeyopt ec_paramgen_curve:P-256 -pkeyopt ec_param_enc:named_curve
openssl r… Continue reading How to generate a X509 certificate with an EC public key and RSA signature using OpenSSL?
I’m developing a safety product and asked to enable secure communication support to work with maintenance application running on a host pc and to work with third-party products.
So Do I need to have two certificates in my product one with … Continue reading One product unit needs one or two x.509 certificate
I am trying to send a password from a client to the server. I just don’t know how to encrypt it.
method:
I used a website (Instagram) as a guide here.
Here the password is encrypted with AES and the key is then encrypted with a Curve25519… Continue reading Curve25519 vs. Curve25519 and AES Key vs. Curve25519 AES Ciphertext (Instagram)
I’m wondering what is the current knowledge regarding the difficulty of solving the Diffie-Hellman problem (DHP).
Obvisously solving the DLP (discrete log) is harder than solving DHP.
What about the converse :
In a general setting (cyclic… Continue reading Solving Diffie-Hellman vs DLP
As far as I understand it, the address of a v3 onion service is simply an ed25519 public key itself. Assuming the end user actually managed to acquire the legitimate 56 character .onion address (i.e. without getting phished/given a fake), … Continue reading MiTM attack on a Tor V3 Onion Service?
I found that secp384r1 is supported in almost all web browsers and it is considered secure.
My question is:
Is it okay if i use only secp384r1 and up named groups?
Are there any disadvantages considering that the server is only accessible … Continue reading Is using only secp384r1 and up named groups considered okay?
I want to create Password Manager where users can create their accounts and store website passwords.
For the frontend, it will be a mobile app, but I need REST API as the backend data where the data will be stored.
I thought to encrypt and… Continue reading How to securely design REST API for Password Manager app?
Can a client with an ECC certificate and a server with RSA certificate establish a mTLS connection?
Can they agree on a cipher suite?
Why?