Collaborate Disseminate
I’m trying to compute the entropy of a passphrase of the following pattern:
…. …. …. ….
Where . represent lowercase characters.
The passphrase follows the rule that the two parts of each 4-character sequence have a… Continue reading Is this password entropy calculation correct?
In my web application I have to store hashed values (using BCrypt) as ID for a database table.
The input for each hash value is a unique string.
I am concerned about possible collisions.
1) What is a chance to have collision … Continue reading BCrypt hash as database table ID
I get that when GETRANDOM is called with bitmask 00, the entropy source is from /dev/urandom, and the CSPRNG output is blocking until internal entropy pool has at least 128 bits of entropy. Is the state of the pool readable at /proc/sys/ke… Continue reading GETRANDOM syscall’s relation to kernel entropy pool state
Despite the claims of “free energy” on the title of the video below, this is not yet another wacky perpetual motion story. We here at Hackaday fully support the laws of thermodynamics, and we think you should too. But you have to admit that a pump that works without any apparent energy inputs looks kind of shady at first glance.
The apparatus in question is a ram pump, a technology dating back all the way to the 18th century. The version that [Junkyard – Origin of Creativity] built uses commonly available materials like PVC pipes and fittings. About the only …read more
When you think about typical SSL-Interception in Firewalls, depending on the number of TLS-Connections, loads of Certificates get faked “on the fly” in a very time critical environment.
In my experience on running a VPN Ser… Continue reading Do dynamic certificates for SSL-Interception pose a security risk due to weak entropy?
Context : I do offline backups on a VeraCrypt volume stored on an unplugged hard drive, in a location where I don’t go often, where someone could recover the drive and try to read it. It’s therefore critical for me to securel… Continue reading Which password strength should I aim for to securely encrypt a disk?
I have an idquantique TRNG (USB).
On my Debian machine, I can easily create a file on my disk coming from that TRNG filled with some random content.
Is it possible to make OpenSSL and GnuPG (for key generation for instance) … Continue reading Use USB TRNG as source of randomness for OpenSSL key generation
I have seen banks using grid card authentication after primary password based login. However, I am unable to find sufficient detail as to how it is being used. Is the challenge truly random or pseudo random or is it determini… Continue reading Algorithm used in grid card authentication
Imagine a typical 4-digit PIN scheme containing the digits [0-9]. If I choose my PIN at random, I will get one out of 10 * 10 * 10 * 10 = 10,000 codes. Based on my own experience, more than half of the time a random sequence of four digits… Continue reading When choosing a numeric PIN, does it help or hurt to make each digit unique?
Introduction:
I used to use the same password for everything (it was at least a really random password with fake words). Then I found out that I should have different passwords for different sites cause some developers have … Continue reading How secure is this method of password generation?
