Collaborate Disseminate
I am making a multiplayer game for fun and wish to keep it secure. The client is written in C# and the server in node.js with a working connection over TCP at the moment. I am new to this subject, and implementing something w… Continue reading Can I use HTTPS to pass a symmetric key used for encrypting TCP packets?
Assuming I have an RSA public key which is stated to be created with the same modulus of the RSA private key that I have, and I have ciphertext created with the mentioned public key, can I decrypt the ciphertext? And how?
I am looking for, but not finding, a published protocol that does something similar to TLS 1.3 mutual authentication, but simplified by using assumptions to reduce the chattiness of TLS.
If we assume that some set of clients… Continue reading Two message key agreement and mutual authentication protocol?
I know there are key-exchange methods in Cryptography. But in case of Secret-key Steganography:
What does actually a stego-key mean?
How can we use the key?
Once the key is used how can we exchange that with the receiver?
There is a key exchange process which I am having a look at. I am aware of key exchange algorithms such as Diffie-Hellman and the like, however as there is a method to provide an initial key out-of-band (in this case with the… Continue reading Is this Key Exchange secure?
Update: original problem description
I am developing a client-server system for configuration updates. The system handles update tasks. An update task is initiated on a server; multiple clients then need to connect to the se… Continue reading Two-party symmetric key establishment protocol
I can’t seem to find a sufficiently detailed resource that describes the IKE phase 1 PSK identity authentication process. They seem to focus on differences between aggressive and main mode while oversimplifying them.
Can a password strength policy i.e.:
must contain at-least 8 chars
must contain one uppercase letter
must contain one lowercase letter
must contain one number
Be enforced if a PAKE protocol is used, such as OPAQUE?
Is there … Continue reading Can password strength be enforced with PAKE protocols?
I’m looking for someone like NSSLabs, Synack, Tevora, but obviously not these companies.
Continue reading What are some accredited security product testing and validation firms? [on hold]
It’s been a while and I’m still trying to figure out if my understanding of ECC crypto is correct.
Basically from what I understood a purely asymmetric encryption is never used. Usually the asymmetric encryption is used to s… Continue reading ECDH and static key encryption