Category Archives: keys

GCHQ on Quantum Key Distribution

Posted on by

The UK’s GCHQ delivers a brutally blunt assessment of quantum key distribution: QKD protocols address only the problem of agreeing keys for encrypting data. Ubiquitous on-demand modern services (such as verifying identities and data integrity, establishing network sessions, providing access control, and automatic software updates) rely more on authentication and integrity mechanisms — such as digital signatures — than on… Continue reading GCHQ on Quantum Key Distribution→

Google Employees Use a Physical Token as Their Second Authentication Factor

Posted on by

Krebs on Security is reporting that all 85,000 Google employees use two-factor authentication with a physical token. A Google spokesperson said Security Keys now form the basis of all account access at Google. "We have had no reported or confirmed account takeovers since implementing security keys at Google," the spokesperson said. "Users might be asked to authenticate using their security… Continue reading Google Employees Use a Physical Token as Their Second Authentication Factor→

Major Bluetooth Vulnerability

Posted on by

Bluetooth has a serious security vulnerability: In some implementations, the elliptic curve parameters are not all validated by the cryptographic algorithm implementation, which may allow a remote attacker within wireless range to inject an invalid public key to determine the session key with high probability. Such an attacker can then passively intercept and decrypt all device messages, and/or forge and… Continue reading Major Bluetooth Vulnerability→

Risk Assessment and Identifying Vulnerabilities in Your PKI Management

Posted on by

Cyber security is a field both deep and broad with a large number of complicated facets. As no one can be an expert in all things, it can sometimes be difficult even for experienced security professionals to know where vulnerabilities are in the system… Continue reading Risk Assessment and Identifying Vulnerabilities in Your PKI Management→

E-Mailing Private HTTPS Keys

Posted on by

I don’t know what to make of this story: The email was sent on Tuesday by the CEO of Trustico, a UK-based reseller of TLS certificates issued by the browser-trusted certificate authorities Comodo and, until recently, Symantec. It was sent to Jeremy Rowley, an executive vice president at DigiCert, a certificate authority that acquired Symantec’s certificate issuance business after Symantec… Continue reading E-Mailing Private HTTPS Keys→

Amazon’s Door Lock Is Amazon’s Bid to Control Your Home

Posted on by

Interesting essay about Amazon’s smart lock: When you add Amazon Key to your door, something more sneaky also happens: Amazon takes over. You can leave your keys at home and unlock your door with the Amazon Key app — but it’s really built for Amazon d… Continue reading Amazon’s Door Lock Is Amazon’s Bid to Control Your Home→