Collaborate Disseminate
I’m looking for a way to tie the use of an ssh private key to a particular device. Ideally an attacker could steal the private key but would not be able to use it in another device.
The Intel EPID facility might work. A rem… Continue reading SSH keys tied to EPID device
I haven’t found a duplicate which explains with sufficient clarity how does the process of rotating encryption keys work in simple layman terms.
I know how private/public key cryptography works, I know how symmetric cryptography works but… Continue reading Rotating encryption keys – how does it work?
I want to load EC private key (private.pem) to keystore.
$ cat private.pem
—–BEGIN EC PRIVATE KEY—–
——-some text ———–
—–END EC PRIVATE KEY—–
After reading lot of SE answers, some suggests to generat… Continue reading How to load EC private key to keystore
Let’s say I want to issue certificates to create a network of machines authorized to communicate based on my authority as the issuer. But, I want the new key pair to be completely and permanently hidden from me, until I recei… Continue reading Can I hide the key pair from the issuing authority?
I’m new to security and crpyto,
I know that Public/Private keys are generated in a different way depending on the used algorithm,
But let’s take RSA as an instance (Using prime numbers),
Does the algorithm generate keys rand… Continue reading How does algorithms ensure public/private keys uniqueness? – RSA
Basically I would like to use Android Keystore to sign requests going to a server from an Android phone. My goal is to have a way of verifying the origin of the request.
Does Android Keystore offer anyway for the receiver of the request t… Continue reading Android hardware Keypair Info
I am trying to piece together some information about the security system in Android. Particularly about how user’s password/PIN is connected with encryption keys in file-based encryption mode. I’m doing this for my university project. I’ve… Continue reading Connection between PIN/password and encryption keys in Android
Example application need:
An application pulls down data from a web service and needs to encrypt and persist this data locally to disk. Only this application should be able to decrypt the data stored locally. The applicatio… Continue reading Using RSA private key as AES key for encryption
For devices like decrypting HTTPS proxies, there is often a built-in mechanism for generating a key-pair and CSR. An admin can then have their in-house authority sign the CSR with a subordinate CA template, and bind the cert… Continue reading Security Appliance Key Generation
I’ve been looking around how server-side encryption works. Thanks to the nextcloud doc I understand the implementation.
Basically, when you first log in a key pair is created, and the private key is encrypted using a key… Continue reading Server-side encryption mechanism (Nextcloud)