Collaborate Disseminate
I need to encrypt personal data like email, phone number, etc. I am using AWS KMS for managing the encryption keys. This is the system that is already implemented is as follows:
All the existing data is encrypted using a worker which firs… Continue reading How to manage Encryption Key for Server Side Encryption in AWS S3
I was wondering if having an "oversubscription" of "Key usage fields" inside a X509v3 certificate can negatively impact the performance and/or the security of a server.
For example I have a CSR which requests: Digital S… Continue reading Impact of having more X509v3 Key Usage fields than required?
I have a Yubikey version 5.2.7 and I can’t generate any new certificates on yubikey manager app, which is weird since I have already generated two certs (on 9d slot) and they worked fine.
Now the following message pops up:
Long story short, I’ve assigned with the task to find a way to improve security in an application, they are using java keystores to save and protect the keys. The application owner is worried that someone could stole the keystore and the pass.
I’ve read this question Storage of ‘secrets’, keystores, HSMs and the rest and as the accepted answer says there is always something at the end that could expose everything.
As I see the best way to protect the keys is to store private keys in an HSM and do there the signing operations.
This has lead me to another problem: I have to store the keys in the HSM in a way that applications don’t have access to other application keys, the HSM in my organization is a Thales Luna, so to make this separation between applications they need to create partitions in it which has a downside, this partitions have additional cost.
Other thing I’ve noticed is that even with the HSM there is something always in the client side that could lead to a breach, the difference is the complexity to get the keys or get access to the HSM to misuse the keys.
I am exploring the option of encrypt the private keys of each module with a key inside the HSM, so regarding this the question should be: Is it really more secure using a key inside the HSM to encrypt the private keys than using the java keystore only?
I have been looking for my lost car key. I have RTL-SDR and I am able to listen to key fobs frequency which varies between 350-444MHZ. I was trying to understand how most of the keyless entry systems work but I’m not sure whether:
Key fob… Continue reading Looking for a lost PKE keyless entry fob
Imagine you get hold of someone’s private SSH key, which is encrypted. Now imagine you also get hold of the unencrypted key (e.g., because some SSH client stores it after decryption).
Can you determine the encryption passphrase using this … Continue reading Can you obtain the passphrase of an encrypted SSH key, given the unencrypted key?
What’s the required key usage/extended key usage for signing documents, eg.PDF, Word, PowerPoint, Excel, etc…
I am going to create a self-signed certificate that is needed to sign those documents. I wonder which key usage is required as … Continue reading Required certificate key usage for signing document
I am using CryptoJS AES 256 encryption:
CryptoJS.AES.encrypt(realData, generateKey(passphrase), {iv: iv});
The secret is generated through:
function generateKey(passphrase) {
const salt = CryptoJS.lib.WordArray.random(128 / 8);
cons… Continue reading How safe is AES 256bitkey encoded in HEX, Base64?
Is it possible that using my Intercom app id, key and secret, an attacker could impersonate the company or a user?
Continue reading If my Intercom app id, key and secret are public, is my app vulnerable? [closed]
I lost my private keys after formatting my Mac and reinstalling my OS. I only have the public keys and the passphrase. What can I do?
Continue reading Lost keys after formatting Mac HD [migrated]