Collaborate Disseminate
I’m preparing for an introductory information security examination in university and this is one of the tutorial question on Network Protocol attacks. I tried (a) and came to this conclusion:
Since the EPbX() is a public key… Continue reading Thought process on Network Protocol Attack
This question might very well be more a confirmation than anything else, but I’m breaking my head over a problem I try to solve. I hope someone can either confirm my thoughts or tell me something I’m missing.
We are trying to setup a secu… Continue reading First setup security protocols (key transfer) in not-secure environment
I’m writing reliable UDP implementation and I want it to be secure. Also, I want to make use of elliptic curve cryptography. I don’t have the proper education to really understand the math behind this kind of cryptography, bu… Continue reading Is this key exchange algorithm secure and valid?
Suppose I always reuse p, g and a in DH and there is someone monitoring my communication. Is there a way this person can use this to perform some kind of attack to me?
I believe that reusing p and g isn’t a big issue, howeve… Continue reading Is there any problem to reuse the prime p, g and a in Diffie-Hellman?
How can a static ECC public key be authenticated when being shared between the client (who has just created the static ECC public key) and the CA (Certification Authority) – who will sign and send the client’s static public key to another … Continue reading Authenticate Static Public Keys
Say I want to exchange a key with someone for a symmetric cipher (say AES) without meeting them in person. What would be the most secure way to do this over the Internet? My first instinct would be using a custom RSA channel … Continue reading How can I distribute highly confidential keys for a symmetric cipher?
I am reading design documents of an internal Whats-app like chat application.
Developers are planning to use asymmetric encryption to encrypt all messages.
Every user will have a public/private key pair and for every new ch… Continue reading Is it a good idea to use asymmetric encryption for a chat application?
In a game client/server that I’m developing, I want to allow a user to authenticate over TLS (via a REST endpoint on an HTTPS server) before dropping to an unencrypted low-latency UDP protocol. To prevent spoofing and replay … Continue reading Can I securely share an HMAC key over a TLS connection?
Need help understanding the root cause of the problem.
Trying to connect to a server from a java netty client, both client and server is under control, can see logs, etc. Connection is done through a proxy. Server is configu… Continue reading Yet another problem with establishing TLS connection
I have a problem when I want to encrypt decrypt data by use the same key in every services.I use ECDH Method to encrypt decrypt data between client and server. I have a exchangeKey service to gen Key send back to client and o… Continue reading How ECDH Implement in Microservices