Collaborate Disseminate
In the book Network Security with OpenSSL from O’Reilly Media, it says that when you provide a password for a symmetric cipher, the OpenSSL command line utility generates a key randomly from the password. I’m assuming that b… Continue reading What is the process by which the OpenSSL utility generates a symmetric key from a password?
Given an insecure channel, what are the pros and cons of using Diffie Hellman to generate a symmetric shared key and then send encrypted data with this key, or simply use Shamir’s three-pass protocol with symmetric ciphers fo… Continue reading Pros and cons of Diffie Hellman vs Three Pass Exchange
I am writing a Java application that is required to locally authenticate a user with a password and then use the password to generate an AES-256 key for local file encryption/decryption.
I understand the principles behind everything and h… Continue reading Using PBKDF2 for hash and AES key generation implementation
Please help me answer this question.
I cannot find discussion about Schnorr Public – key Cryptosystems.
In my web application I generate temporary tokens/passwords for accessing files using this method:
ALPHABET = “abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_”
ALPHABET_LENGTH = 64
def generate_token(str_le… Continue reading Generating temporary passwords/tokens using RNG
I have n secrets to hide, my goal is to remember only a seed and derive them from the seed. Is this a safe aproach?
Calculate n keys:
k(1) = seed XOR secret(1)
…
k(n) = seed XOR secret(n)
Store these keys in an apllicat… Continue reading Is it safe to hide secrets this way?
Assume that I’ve used white noise from the classic “zener breakdown” circuit to produce 512 bits of random data.
If I use these as the key to a Veracrypt volume, is there any benefit to running 200,000 rounds of sha-512 on t… Continue reading Are many rounds of SHA needed for a random veracrypt key
Assume that I’ve used white noise from the classic “zener breakdown” circuit to produce 512 bits of random data.
If I use these as the key to a Veracrypt volume, is there any benefit to running 200,000 rounds of sha-512 on them, or is one… Continue reading Are many rounds of SHA needed for a random veracrypt key
I have recently been reading (and writing) a lot off ECC on top of TCP via pythons sockets. I’ve stubbled across a couple of things mentioning how elliptical curves are more secure with the same key length as other algorithms… Continue reading Are cryptographies based on bitwise operations considered secure?
After reading the excellent answers here and documents about how SSL works. I have a doubt about what the function of the ClientKeyExchange step is. In the above linked answer and document it says that the client part of the … Continue reading SSL/TLS – Does the client select symmetric key for data encryption?