Collaborate Disseminate
In its Vision 2030 development plan, Saudi Arabia included a National Transformation Program whose purpose is to diversify the Kingdom’s income away from the oil industry. One of the core tenets of that program is to enable the growth of the priv… Continue reading National Cybersecurity Authority (NCA): What You Need to Know
I’m trying to sign a CSR using python-asn1crypto and python-pkcs11. I have an ECC Keypair stored in a Hardware Security Module (HSM).
Here’s a code sample:
key = decode_ec_public_key(encode_ec_public_key(pub))
info = CertificationRequestI… Continue reading Signing CSR using an ECC keypair
I posted this question already on SO, but as it is not really a programmin question I thought it might be a better place to ask here:
I want to setup a new SSL certificate store for generating SSL certs (server certs (nginx) and client cer… Continue reading Algorithm and key size to choose for SSL certificates (security and CPU wise) in 2020 (using nginx)
As per this answer RSA and ECC certificates should use different cipher suites. I tried to test it. It holds true for TLSv1.2. But for TLSv1.3 I see same cipher suite being used for both types of certificates(Tested via Google Chrome=>Dev … Continue reading Why does TLS1.3 use same cipher suite for RSA and ECC key pairs?
My boss wants to sign our binary. I need to tell him how he can create the signing key.
Most if not all sites I have seen about signing binaries suggest using GPG.
OK, so GPG per default has 2048. Their FAQ has several arguments why 3072 o… Continue reading gpg key size of 4096 and "the future is ECC"
I’m generating p12 for EC keytypes using Forge library. https://github.com/digitalbazaar/forge/issues/777
This library already providing p12 for RSA key types, Now, I’m trying to enhance to ECC keytypes.
Generating pem format Privateke… Continue reading pkcs12 generation for EC key types using javascript
I looked around, and all I see is websites using RSA2048 for Root signature, and a few using ECC for encryption.
Are there any reasons folks don’t seem to use ECC for TLS root signature?
Are there any drawbacks to using ECC for X.509? – … Continue reading Why don’t folks seem to use ECC for TLS root certificate signature?
I configured a Windows CA and created a certificate template to issue certificates with ECDH_P384 keys:
Then I noticed that it’s not possible to set the “Key Encipherment” key usage in the “Extensions” tab:
What is the reason behind … Continue reading Does the "Key Encipherment" key usage make sense when using ECDH P384?
What is the recently patched and disclosed Windows 10 OS family Crypt.dll vulnerability CVE-2020-0601, nicknamed ChainOfFools and/or Curveball? I’ve read up on it and while I understand the basics (deriving an alternative private key from … Continue reading How does CVE-2020-0601 (ChainOfFools/CurveBall) work to undermine ECC?
With SSH, most of my servers use ed25519 (the twisted Edwards variant EC) for authentication.
I was wondering, after authentication with ed25519, does SSH protocol 2 simple use ephemeral/ephemeral ECDH over curve25519 for th… Continue reading SSH and the ECDH component