Collaborate Disseminate
I’m familiar with the operation of public/private keys, however I was wondering how is the SSH protocol using them internally (from a desktop to a distant server for instance) is using it).
When I try to login to my server how is the latte… Continue reading What happens internally when I login using SSH and public/private keys? [duplicate]
I found suspicious files inside an online banking program using apksigner to check RSA certificates:
Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): true
Verified using v3 scheme (A… Continue reading Does this application contain malware? [closed]
I’ve followed the instructions here in a first attempt to test the authenticity of two sideloaded APKs of the VR SecureGo Plus banking app using keytool and jarsigner under Windows. The APK sources are APKSOS and APMCOMBO.
This app require… Continue reading Authenticity of VR SecureGo Plus banking app [migrated]
Problem
For some reason I forgot the passphrase for my GnuPG signing subkey, but I have my master key stored in a separate device. Is there a way to regain access to my subkey? Or should I replace my old subkey with a new one hoping the ol… Continue reading Reset forgotten subkey password using master key?
My public key had expired so I tried to edit the expiry date with
gpg –edit-key
It seemed to be too much trouble somehow to modify the correct subkey so I deleted the subkey instead with the intention to add a new one and send it to peop… Continue reading deleted a subkey and can now no longer decrypt
I have a hash H1 and a password P1. The hash is MD5. I have another hash H2 without a password. Can I leverage my knowledge of H1 and P1 to get a key? can I use this key to decrypt H2? Are there recommended tools? Thanks!
I understand that a pair of a locking device and an opening device is asymmetric, and a single device which can both lock and open is symmetric.
Is that correct?
Update: I’ve been able to work out everything I was asking about packet structure when I was finally able to get Wireshark to work, but there is one last thing I’m confused on which I detail at the end of the question.
Original question:
I… Continue reading How exactly does OpenVPN’s tls-auth option apply HMAC to packet messages?
When using OpenVPN, tls-auth and tls-crypt are widely adopted options, allowing a static key to be used in the initial handshake. This helps prevent against DoS attacks, as without the valid key a client will be disregarded almost instantl… Continue reading Is providing a static TLS key during an OpenVPN handshake useless for commercial providers?
If you look at the above Kerberos protocol’s diagram, you can find that the protocol works on the basis that the (symmetric) client key initially exists on both the client node and the key distribution center.
Then, the question is, how c… Continue reading How can a client safely post/get a (symmetric) client key to/from a key distribution center?