Collaborate Disseminate
If it comes to the security a hashing or encryption algorithm provides, we never know the full story. There’s that part that we (respectively the public research) understand and can reason about, but we also know that there might be weakne… Continue reading Do you rather trust a widely adopted algorithm or an underdog if they’re cryptoanalytically on a level playingfield?
Pretty straightforward question. Take the image here:
https://i.imgur.com/oEdf6Rl.png
Does it come with a checksum, which I can verify against after I have fully downloaded the file?
This question goes for any file downloaded, and in my pa… Continue reading Do all files downloaded from the web, come with a checksum to verify the file?
Let’s say Alice has three secrets: SecretA, SecretB, SecretC
Alice shows these three secrets to Bob and gets a single signature from him that signs all three secrets together. Something like
Signature = Sign(Hash(SecretA, SecretB, SecretC)… Continue reading How to sign multiple data sets with a single signature, so that it can be validated for single data set without requiring the rest of the data?
I’ve often heard people talking about not using the same password on every website. What’s the deal if servers store passwords in a SHA hash instead of plain text? The most they can do is spam you with junk mail, right?
Continue reading Why can’t you use the same password for every site, if they are hashed on the site?
I am trying to encrypt one of my primary Linux partition (5GB) by following this example to encrypt.
I want to confirm some of my understandings:
Salt is automatically generated by cyrptsetup with luks?
–iter-time and –hash only affects… Continue reading dm-crypt 2.0.3 + luks: salt auto-generated? what affects decryption speed?
I am trying to migrate off of firebase, as in doing so, you can export the hashes of user passwords. Looking at their algorithm, they do not store password hashes, but rather, they use the first 32-characters of a password hash to encrypt … Continue reading Why does firebase encrypt with password hashes instead of storing the hashes?
So OpenSSL can calculate a hash value for X509 certificates that uniquely identifies this certificate:
https://www.openssl.org/docs/man1.0.2/man1/x509.html (argument -hash or -subject_hash)
now, if I have a CMS file (https://www.rfc-editor… Continue reading OpenSSL: how to get matching subject_hash from a CMS SignerInfo?
To be clear when I say "private unique identifier" I mean an identifier, which is not stored on the database for the website, it would be hashed in combination with the password and a good salt in the hash table for login informa… Continue reading Why don’t security conscious websites use a combination of private unique identifier and password to secure their logins?
How to brute crypt I already know kind of. For example I know that it gonna be five numbers separated by dashes (like "1-2-3-4-5"), but I don’t have any idea the way it was crypted. Unless it was some of the SHA hashes.
Can you r… Continue reading How to brute crypt with unknown hash?
I would like to send emails from a server, but also make them unable to trace for me as server owner or attackers. I want this for GDPR but also to protect people from abusers.
Short info about service: I am a provider of a service as a pe… Continue reading Sending and blocking emails from hashed and salted address ? (for GDPR)