Collaborate Disseminate
Background: I’m trying to set up a QA/test environment for a system comprising (1) a web application configured for HTTPS connections, and (2) a Python-based client application running on a mobile device. The installer for the web applic… Continue reading AuthorityKeyIdentifier missing from keypair generated with java keytool
If I ask AWS Key Management Service for a 64-byte key, is it OK to split it in half and use each half as a separate key? e.g. the first half for encryption and the second for HMAC?
I figure that it would be ok because assuming that AWS’s … Continue reading Is it OK to use two halves of a key independently?
I’m looking for pointers to any routines or functions within the ARM mbed TLS and/or ARM mbed crypto libraries to export generated key pairs in PEM or DER format?
I understand that usually one should use Tails on a trusted machine to generate PGP keys. However, I find it difficult to trust a machine with an Intel CPU, many wireless interfaces, a hard disk that may have some hidden caches, etc, etc.
… Continue reading Is tails needed to securely generate a PGP key on raspberry Pi?
I generated a key pair on Windows Server 2019 using the native ssh-keygen located in System32\OpenSSH.
Now I think the permissions of the private key are somewhat worrying…
Is it expected to have read-write-execute (700) for Administra… Continue reading Key Pair permission on Windows 2019
In the Asian Saga series by James Clavell, the Struan family gave away the half-coins of Jin-qua: in exchange for a desperately needed loan, the pirate Dirk Struan received 4 halves of 4 coins. The Chinese merchant, Jin-qua, kept the rema… Continue reading Recreating the Half Coins of Jin-Qua
Is running cryptographic operations (encryption / decryption / signing / verifying / key-exchange / key-generation) in a Docker container affecting the quality of the crypto or entropy?
If it does impact it, how do you mitig… Continue reading Does Docker affect the quality of cryptographic operations?
When deriving a private key from a password, will the resulting secret key be any weaker if the user email is included in the function input? Meaning, user email concatenated with the user password.
I’m using scrypt for key derivation, wi… Continue reading derived key from email + password?
From what I’ve read, I was able to deduce a number of steps but I am not sure if they cover all action or if they are 100% correct.
Initial setup for client
Enables ssh service
Initial setup for server
Installs a ssh-server, that wi… Continue reading What are the exact steps made to establish an ssh connection? [closed]
I am currently studying the most widely known encryption algorithms and methodologies. For practice purposes, I want to implement everything from ECB to RSA as some kind of a C crypto library. How would I generate a secure ke… Continue reading How do I program a function to generate a secure Block Cipher Encryption-Key?