Collaborate Disseminate
Given an one-key cipher such that:
E[k1,E(k2,m)]=E[k2, E(k1, m)]
Is there any key distribution protocol that involves only two parties (Alice and Bob) without the key distribution center?
The protocol should allow Alice to send a session k… Continue reading Key distribution protocol involves only 2 parties, given E[k1,E(k2,m)]=E[k2, E(k1, m)]
I am trying to export public and private key of an ECDSA certificate from Windows key store. PFXExportCertStoreEx fails when I try to export ECDSA certificate. GetLastError() returns 0x80090016. I am able to correctly export cert and key f… Continue reading Export ECDSA certificate from Windows Store
Suppose I have a game server with only the wireguard port open, the client request wireguard configuration from a HTTPS server. And use the obtained configuration in a modified wireguard. The configuration restrict AllowedIPs and the modif… Continue reading How to securely transfer the privatekey and pass it to wireguard in a memory safe manner?
4G and 5G authentication procedures includes master keys or long term keys which are shared between subscribers and Home Networks, for 4G they are called Ki.
A case was reported here in which NSA stolen those keys for an important manufact… Continue reading SIM hardware protection of master and long lived keys
If you look at the above Kerberos protocol’s diagram, you can find that the protocol works on the basis that the (symmetric) client key initially exists on both the client node and the key distribution center.
Then, the question is, how c… Continue reading How can a client safely post/get a (symmetric) client key to/from a key distribution center?
I received a two-component KEK TDES key and a BDK cryptogram, which is encrypted for this KEK.
Do you have any suggestions on how to load such a key into the HSM device? Eg. Luna HSM
Continue reading Import BDK encrypted under the Transport Key KEK on HSM
I’ve been looking into TPM 2.0 with .NET (TSS.MST), and I don’t understand how to preserve key upon application rerun. TSS.MST provides a binary simulating the TPM2.0 device and the app is connecting over TCP.
Here it is said you’re not su… Continue reading How to preserve key in TPM 2.0
I am not using AWS, google cloud or similar. I have a vps on another webhosting service.
I am going to encrypt my data but don’t know where the best place to save the encryption keys would be?
I can see that AWS has cloudHSM, Google uses … Continue reading Alternative to AWS CloudHSM? [closed]
I interact with some API’s that use PKA and I’m looking for the safest / best-practice way to store my secret key. The approaches I know are for example:
Create a 0500 access directory on my server
Within that directory, store the file co… Continue reading Best and safest way to store secret key used for PKA on server?
The global hardware security modules market size was valued at $3.1 billion in 2020 and is projected to reach $7.9 billion by 2028, growing at a CAGR of 12.4% from 2021 to 2028, according to Verified Market Research. With the rising frequency and compl… Continue reading Hardware security modules market to reach $7.9 billion by 2028