Collaborate Disseminate
I am not totally sure how the following concepts are related, could someone please explain?
password-based key derivation
passphrase that can be passed to crypto.generateKeyPairSync (in Node.js)
PBKDF2
I am creating a simple chat applica… Continue reading relation passphrase and password-based key derivation
I have a mobile and backend applications. And I am trying to communicate with Microsoft Graph API and I obtain access and refresh tokens through their OAuth. I get these tokens from my mobile app at the first place so a webpage is prompted… Continue reading Saving access and refresh tokens securely
When used in web applications and network security, encryption is typically used to protect data in transit and at rest. For example, web browsers and servers can use encryption to protect the data that is transmitted between them over the… Continue reading How does encryption work with access control and authentication together to enhance web application security? [closed]
I’m considering using key rotation for a website. Let’s say I generate new keys every month.
In Jan someone saves a URL on their browser, let’s say in plaintext it’s https://example/12345 encrypted to https://example/sdsdsdsd
In Feb I have… Continue reading Does having 2 different cyphertexts for the same plaintext help an attacker
Meta has threatened to pull WhatsApp out of India if the courts try to force it to break its end-to-end encryption.
Continue reading WhatsApp in India
I want to exploit this python code (pycryptodome library is used) using the known-plaintext vulnerability of AES in ECB mode:
def get_user_token(name):
cipher = AES.new(key=key, mode=AES.MODE_ECB)
name = name.encode(‘utf-8’).decod… Continue reading Exploit AES-ECB in json.dump() [closed]
I have REST APIs. I want to send the data encrypted during the API call. I know HTTPs does that but I want to do it custom ( can use the modules in the languages, i.e. Java and React-JS) in my frontend and backend code.
My Requirement is t… Continue reading Implement the Encryption in API Call [closed]
An anonymous reader quotes a report from MIT Technology Review: Almost all keyboard apps used by Chinese people around the world share a security loophole that makes it possible to spy on what users are typing. The vulnerability, which allows the keyst… Continue reading Almost Every Chinese Keyboard App Has a Security Flaw That Reveals What Users Type
Yet another international cop shop has come out swinging against end-to-end encryption – this time it’s Europol which is urging an end to implementation of the tech for fear police investigations will be hampered by protected DMs. The Register: In a jo… Continue reading Europol Becomes Latest Law Enforcement Group To Plead With Big Tech To Ditch E2EE
I have the 2 encrypted passwords in my MSSQL database and I’m trying to decrypt it. Here’s one of the encrypted password:
E4-68-3F-BE-91-CC-BE-B9-27-4B-18-B1-5F-1B-39-66
The password to the above encryption is maintenance2 but I don’t hav… Continue reading Find password decryption used in MSSQL