Collaborate Disseminate
I am currently writing a thesis about different cryptographic protocols like DH-Key exchange, TLS or IKE.
Most of them rely on a prime number earlier or later, so for security reasons I wondered if this prime number is supplied by the user… Continue reading Who provides prime numbers for cryptographic protocols? [migrated]
What is the difference between FTP and HTTP? When I download any file mp3 mp4 pdf etc from a website Do FTP and HTTP work simultaneously?
It’s known that card readers, which use the Wiegand format, can be attacked by installing a sniffer, such as an ESPKey. After the sniffer is installed, whenever anyone uses the reader, their credentials get saved, and the attacker can clon… Continue reading Defending against Wiegand sniffing (ESPKey) attacks in RFID card readers
What encryption protocol is Kleopatra using to protect the private key?
I checked PGP RFC document and found out different protocols can be used, it’s up to the software developer.
Has anyone be able to find what symmetric encryption proto… Continue reading What encryption protocol is Kleopatra using to protect the private key?
What encryption protocol is Kleopatra using to protect the private key?
I checked PGP RFC document and found out different protocols can be used, it’s up to the software developer.
Has anyone be able to find what symmetric encryption proto… Continue reading What encryption protocol is Kleopatra using to protect the private key?
An nmap scan of my test computer returns a result of “5357 / tcp open wsdapi”.
After some research, this is something that can be exploited.
It is explained here that:
By default, WSDAPI will listen on TCP ports 5357 and 5358. The Windows… Continue reading Can I elicit responses from "any remote host" on "all protocols" if I want to?
This new protocol, called Oblivious DNS-over-HTTPS (ODoH), hides the websites you visit from your ISP.
Here’s how it works: ODoH wraps a layer of encryption around the DNS query and passes it through a proxy server, which acts as a go-between the inte… Continue reading Oblivious DNS-over-HTTPS
I’m trying to explore the possible attacks on MQTT without TLS. It’s obvious that this might involve MITM, but I need clarification on how to test attacks.
I did analyze the packets from Wireshark and can observe the message being transfer… Continue reading MQTT Attacks – without TLS
I was reading the zerologon whitepaper by secura named:
"Unauthenticated domain controller compromise by subverting Netlogon cryptography"
I’m trying to understand the zerologon attack. The issue is on the KDF function (AES-CF8) … Continue reading Zerologon question – AES-CFB8
Refer to the chart on 1-2 oblivious transfer : https://en.wikipedia.org/wiki/Oblivious_transfer
I’m Bob, I know N,e,x0,x1. Can I send Alice a v value that, by knowing the m’0,m’1 received, I can crack both m0 and m1?
Thank you
Continue reading 1-2 Oblivious Transfer – Can the recepient obtain both secrets by manipulating v?