Collaborate Disseminate
Lets say that on an Android app the user has to enter a 6-digit PIN on startup. Let’s also say that we have some sensitive data in this application that we’d like to encrypt.
The way I would to this is:
Using a key derivat… Continue reading Securing data on Android app using a 6 digit PIN
Lets say that on an Android app the user has to enter a 6-digit PIN on startup. Let’s also say that we have some sensitive data in this application that we’d like to encrypt.
The way I would to this is:
Using a key derivat… Continue reading Securing data on Android app using a 6 digit PIN
Say I want to create a cloud based private key storage for users, which they can use to sign documents.
On the server side I would use a HSM to make the key storage more secure.
One option is that the signing happens on the server side…. Continue reading Cloud based private key storage for users
The LastPass Team states the following in their FAQ:
Do you use a salted hash for logging in?
Yes, we first do a ‘salt’ of your LastPass password with your username on the client side (on
your computer, LastPass ne… Continue reading LastPass’s use of client-side Salt
The LastPass Team states the following in their FAQ:
Do you use a salted hash for logging in?
Yes, we first do a ‘salt’ of your LastPass password with your username on the client side (on
your computer, LastPass ne… Continue reading LastPass’s use of client-side Salt
I’m generating a key from a password to encrypt data with AES256. Since the generated hash is not stored, would I need to use a salt? If I use a salt and it is made public, is my encrypted data any less secure?
I don’t see a… Continue reading Is a salt necessary for PBKD when the hash is used as an encryption key?
Popular video sharing service Dail Motion has been named in a data breach claim involving 80M accounts and about 20M password hashes. Continue reading Daily Motion video sharing service named in breach claim of 80M accounts
Security firm claims to have found a new weakness in Apple’s iOS 10 that makes it possible to crack password-protected local backups of data for iOS 10 devices. Continue reading Researchers Find ‘Severe’ Password Security Hole with iOS 10 Backups
Browser maker Opera warns 1.7 million Opera sync accounts possibly compromised and urges users to change passwords. Continue reading 1.7 Million Opera Browser Users Told To Reset Passwords
These two FDE solutions are similar, but I noticed different executions speed: specially mounting a device it seems that Veracrypt takes more time decrypting it.
So I would like to compare it with LUKS analizing the header f… Continue reading Differences between LUKS and Veracrypt