Collaborate Disseminate
Apple Mapkit JS requires users initialize Mapkit using an ES256 signed JSON Web Token. My understanding is that most JavaScript signature libraries require a private RSA key to sign stuff using ES256, but Apple provides a PKC… Continue reading Trouble with EC256 signing algorithm
I am targeting a security level of 128 bits for GnuPG, so I am using SHA-256 and AES-128. Now I need to choose between RSA-3072 and RSA-4096.
According to multiple sources RSA-3072 security level is very close to 128 bits. B… Continue reading Compatibility advantages of RSA-4096 over RSA-3072
I’ve seen various references on the web for generating Elliptic Curve KeyPairs in Java, and the two most commonly referenced examples (unsurprisingly) use the JDK default provider and BouncyCastle.
But what confuses me is th… Continue reading Is the JDK standard EC KeyPairGenerator suitable for use with both ECDSA and ECDH algorithms?
Let’s say that I have created a private key file with some passphrase in ssh-keygen. Now someone sends me a message encrypted with my public key. To decrypt the message I need a private key.
Do I need to decrypt the private … Continue reading Does a private key file created with a passphrase need to be decrypted before use
When I ssh to a server – let’s call it x.x.x.x – over one network, Network A, I get a message that the remote host identification has changed.
If I use one of two other networks – call them Network B and Network C – to conne… Continue reading Remote host identification is different on different networks
I use the Rfc2898DeriveBytes for creating an AES key for protecting the user’s data.
For the salt value I would like to use the user’s id, which is a guid.
My understanding is, that the only drawback of using the user’s id w… Continue reading Using the user’s GUID-id as a salt for Rfc2898DeriveBytes
We have a security solution that is deployed on premise to companies with big technical infrastructures. We do real time vulnerability/configuration assessment of all critical assets in the network.
The application server (r… Continue reading Secure Key Storage
I want to use gpg with a symmetric password for encrypting a message. How to do this is explained here in the forum itself, but also in the internet. I’m aware that a symmetric key has the general problem of key exchange. A p… Continue reading Error tolerant password from quiztest
I need to generate an incremental identifier (Example: 000001, 0000002, 000003 … 999999). This identifier will be visible in the structure the serial number I aim to generate:
Structure: [COMPANY_NAME]_[PRODUCT_TYPE]_[ENCR… Continue reading Encrypt and protect an incremental ID
When using ssh-keygen:
What is the passphrase for?
Why is it optional?
What are the security implications of specifying (or not specifying) one?
Below is an excerpt taken from a shell session
(some details may have been altered):
user… Continue reading ssh-keygen: What is the passphrase for?