Collaborate Disseminate
I am interested in ‘adding’ preexisting keys to a TPM’s storage hierarchy.
An example of a desired key hierarchy can be shown as:
(SRK)—–>(User Storage Key)——-> User Working Key 1
|
… Continue reading Can TPM "Storage Keys" be created outside the TPM?
I was building a RESTful Web Service when I came across JSON Web Tokens as an alternative to traditional cookies for authentication. The conceptual core of this method is that the server is the only agent that knows the secre… Continue reading JSON Web Tokens – How to securely store the key?
When I generate RSA key for ssh (both server-side and client-side):
dpkg-reconfigure openssh-server
ssh-keygen
the key generation is completed instantly. However, when I generate RSA key for gpg, the key generation takes s… Continue reading RSA key generation: gpg vs openssh
When I generate RSA key for ssh (both server-side and client-side):
dpkg-reconfigure openssh-server
ssh-keygen
the key generation is completed instantly. However, when I generate RSA key for gpg, the key generation takes s… Continue reading RSA key generation: gpg vs openssh
I am using Tresorit on Mac OS X and iPhone.
When I am using it there is always applied client-side encryption before posting the file to cloud. The key used for encryption is AES-256 and CFB mode of operation is used.
But I… Continue reading How is Tresorit client-side encryption key stored and managed?
I fairly understand the math behind RSA, Elgamal, AES, SHA but not how things are used in practise. How are subkeys different from master key? I understand its purpose from various websites but How is it internally implemented? How is it b… Continue reading What exactly is a subkey?
I’m trying to verify a 2-way SSL connection using the openssl s_client command
openssl s_client -connect localhost:8883 -CAfile ca.pem -cert client.crt -key client.key
The openssl s_client fails with the following error:
openssl s_client… Continue reading Running openssl s_client with an aes encrypted key fails
A security conscious friend of mine was attempting to generate entropy using random dice rolls to generate a random password, and I became curious about the security of random number generators and whether or not she could do the same by s… Continue reading Can the human brain generate cryptographically secure random numbers?
I want to encrypt data, but make sure that no single user can decrypt the data.
Further, it is important not to require ALL users to be present to decrypt. This will allow for some flexibility and reduce the consequences if/… Continue reading How can I allow access to encrypted data if only 2 out of 3 users provide a secret?
Please excuse my ignorance as I am new to information security.
Could someone please explain in simple terms what the difference is between key generation and key agreement. In which situation would I use which.
Keep it sim… Continue reading Difference between key generation and key agreement