Collaborate Disseminate
I have something of a theoretical question – how much of a cyber benefit would there be to taking data, breaking it up and encrypting it, then sending it to the destination via multiple disparate services and methods (such as part through … Continue reading Benefit of splitting and routing/encrypting file packets separately?
My intention is to transfer files between a computer and a cell phone in the same network. I have created a system consisting of two apps for this purpose (everyone should be able to use the apps): The one on the computer creates a Python … Continue reading Securing HTTP File Transfer over local network
I´m currently building a protocol, in which two parties establish a connection via ECDH Key Establishment. The shared secret after ECDH is used to derivate Keys (with HKDF) for symmetric encryption.
In this stage, the protocol is still vul… Continue reading Mutual Authentication after ECDH Exchange with pre-shared secrets
Post-quantum cryptography (PQC) is a hot topic. A recent paper from Tsinghua University raised doubts about lattice-based cryptography for PQC, though an error was found. This has sparked questions about the strength of soon-to-be-standardized PQC algo… Continue reading Preparing for a post-quantum future
Following this tutorial, I got a bunch of questions with this code :
const crypto = require("crypto")
async function hash(password) {
return new Promise((resolve, reject) => {
// generate random 16 bytes long salt… Continue reading Can I add salt to my salt for password hash? [duplicate]
I am attempting to analyze the Bluetooth communication between a fitness tracker (GOJI ACTIVE GFITBK20 Activity Tracker) and its corresponding application (Goji Active) installed on my Android phone. My goal is to capture and analyze the h… Continue reading How to Sniff Bluetooth Traffic and Determine Encryption on Fitness Tracker Data?
This is really neat demo of the security problems arising from reusing nonces with a symmetric cipher in GCM mode.
Continue reading Demo of AES GCM Misuse Problems
How do I go about getting the encrypt of my android google account so I can view my password and use my account like before
Encryption schemes are usually explained to the general public in terms of "time required to break" where strong encryption like AES-256 should in theory take millions of years.
Given that secure random numbers streams are incomp… Continue reading Could this method allow two people using weak cryptography to bootstrap their way to unbreakable cryptography (e.g. otp) [migrated]
Enhance your online transaction security with encryption, VPNs, and authentication. Understand threats, address vulnerabilities, and use secure payment gateways. Stay compliant with PCI DSS and regulatory standards to protect your business and build cu… Continue reading Securing Online Business Transactions: Essential Tools and Practices