Collaborate Disseminate
Previous Title: How to generate keys to encrypt individual messages in a chat-like application
I’m working on an application that effectively amounts to a one-on-one chat app. There is some project-specific business logic … Continue reading Forward secrecy in secret-key based chat application
Say that A is behind a firewall that logs all packets, communicating with B over a publickey-authenticated SSH connection:
A <——– {ssh} ——–> B
v
v
[Encrypted packets all lo… Continue reading Can an old SSH session be reconstructed given root access to the server?
I’d like to know how to implement forward secrecy using GnuPG, and I presume I need some kind of authenticated key exchange. Assuming that I have the following working already:
Alice and Bob have both generated their own regular asymmet… Continue reading Forward secrecy with GnuPG
A vulnerability report states the following:
The server is configured to support ciphers known as static key ciphers. These ciphers don’t support “Forward Secrecy”. In the new specification for HTTP/2, these ciphers have been blacklist… Continue reading Static Key Ciphers and key persistence
Is it possible to achieve forward secrecy using a one way communication cahnnel with pre-shared secret?
I have a setup where i need to send some information across a unsafe channel between server A and server B. This communi… Continue reading One way communication with forward secrecy?
Im making a project that consist of a client/server system that requires TLS without PKI..
Design Requirements:
The client MUST authenticate that it’s communicating with ‘THE’ server
The server MUST authendicate that it’s … Continue reading TLS: is authentication and forward secrecy possible without PKI?
I can not find it in the FAQ.
I know, that TLS has PFS. But I am not interested in transport security but the message encryption of Matrix. Are the messages of Matrix encrypted with PFS?
Continue reading Are Matrix messages encrypted using perfect forward secrecy?
Is it possible to use PFS with a PGP message?
$ gpg2 –encrypt –armor –something? –something? -r friend@email.com
PFS with GPG probably isn’t possible — otherwise everyone would be using it already, right? But I though… Continue reading Using PFS with GnuPG?
If you recall, there was a recent standoff between Apple and the U. S. Government regarding unlocking an iPhone. Senators Richard Burr and Dianne Feinstein have a “discussion draft” of a bill that appears to require companies to allow the government to court order decryption.
Here at Hackaday, we aren’t lawyers, so maybe we aren’t the best source of legislative commentary. However, on the face of it, this seems a bit overreaching. The first part of the proposed bill is simple enough: any “covered entity” that receives a court order for information must provide it in intelligible form or provide …read more
Continue reading Apple Aftermath: Senate Entertains A New Encryption Bill
Does Perfect Forward Secrecy (PFS) make Man-in-the-Middle (MitM) attacks more difficult? If not, why?