Collaborate Disseminate
Earlier today, I was using gpg to generate keys for work. While doing so, I noticed:
We need to generate a lot of random bytes. It is a good idea to
perform some other action (type on the keyboard, move the mouse,
utilize the disks) durin… Continue reading How does user activity affect entropy generation process in GnuPG?
This is more of a request of auditing my approach, thus asking here might not the best way, and I apologize for that, but I really don’t know how to otherwise talk to cryptography experts. I have some basic knowledge about crypto and grasp… Continue reading Derive a key (and not store it) from a passphrase, to be used with AES
I am a complete beginner and have almost no knowledge of encryption.
I have a file transfer website that encrypt the files before saving them in the server then it decrypts the files to be ready to download. The problem is the encryption k… Continue reading How can I encrypt files in a file transfer website? [closed]
I’am trying to get a feel for Elliptic Curve Cryptography. I wrote a small Python program below to generate key material but I don’t get the same result for y_squared and Q.y^2. I’am using the parameters from 256-Bit Random ECP Group (RFC … Continue reading Elliptic Curve Cryptography Key Verification fails [migrated]
I’am trying to get a feel for Elliptic Curve Cryptography. I wrote a small Python program below to generate key material but I don’t get the same result for y_squared and Q.y^2. I’am using the parameters from 256-Bit Random ECP Group (RFC … Continue reading Elliptic Curve Cryptography Key Verification fails [migrated]
I’m trying to decrypt an encrypted ECDSA_secp256k1 private key generated using the OpenSSL CLI command openssl ecparam -genkey -name secp256k1 | openssl ec -aes-128-cbc -out ecdsa_priv.pem but I want to do it using pure Javascript. I tried… Continue reading How to decrypt ECDSA_secp256k1 private key from PEM format generated with OpenSSL
In TLS 1.3 (RFC8446), there are many secrets and keys. As far as I’ve understood, every certificate (usually only the server) has a long term key associated with it which is used with HKDF to generate a temporary key for the certificate ve… Continue reading Permanent Keys/Secrets in TLS 1.3
In a recent ssh -vv output, I saw OpenSSH mentioning a private key file id_xmss.
XMSS is defined in RFC 8391, "XMSS: eXtended Merkle Signature Scheme", May 2018.
OpenSSH has experimental support for XMSS since version 7.7 (2018-0… Continue reading SSH XMSS keypair generation and best practices
In a recent ssh -vv output, I saw OpenSSH mentioning a private key file id_xmss.
XMSS is defined in RFC 8391, "XMSS: eXtended Merkle Signature Scheme", May 2018.
OpenSSH has experimental support for XMSS since version 7.7 (2018-0… Continue reading SSH XMSS keypair generation and best practices
If using asymmetric encryption, such as ES256, is there a reason why a private key could not be discarded after signing some data?
For example with a JWT, or a file hash use for audit at a later date, is keeping the private key necessary? … Continue reading Key management: Can I delete private key in asymmetric encryption?