Collaborate Disseminate
With SSH, most of my servers use ed25519 (the twisted Edwards variant EC) for authentication.
I was wondering, after authentication with ed25519, does SSH protocol 2 simple use ephemeral/ephemeral ECDH over curve25519 for th… Continue reading SSH and the ECDH component
I am creating a secure network data transfer system, and would like to know if there are any obvious flaws in this scheme.
Secrets
The secret is a password that is known to both clients. This password is never transferred p… Continue reading Is this symmetric key system secure?
I’m studying to pentest, so I basically start with networking, programming, and pentest methods, but in a book called The Basics of Hacking and Penetration Testing on Port Scanning, she says that “she tries to log on to any r… Continue reading Any tips from a book on traffic analysis? [closed]
Interesting research: SRLabs founder Karsten Nohl, a researcher with a track record of exposing security flaws in telephony systems, argues that RCS is in many ways no better than SS7, the decades-old phone system carriers still used for calling and texting, which has long been known to be vulnerable to interception and spoofing attacks. While using end-to-end encrypted internet-based tools… Continue reading Security Vulnerabilities in the RCS Texting Protocol
What is the purpose of using a EAP authenticator in the EAP protocol ? Since underhood, the authentication procedure is between the EAP peer and the authentication server, what is the advantages of using a third actor (that i… Continue reading Advantages of EAP Authenticator in EAP protocol
According to this answer, I think that this fact that at the beginning of communication, record protocol just uses a null cipher will make some issues. For detecting any issue, I need to know in which of ssl parts we really n… Continue reading why does ssl need record protocol?
As I know the first communication protocol which establishes between client and server in SSL is handshaking protocol and as this site says:
The SSL record protocol is used to transfer any data within a session – both mes… Continue reading Does the SSL record protocol encrypt the handshake protocol too?
I’m preparing for an introductory information security examination in university and this is one of the tutorial question on Network Protocol attacks. I tried (a) and came to this conclusion:
Since the EPbX() is a public key… Continue reading Thought process on Network Protocol Attack
I’m writing reliable UDP implementation and I want it to be secure. Also, I want to make use of elliptic curve cryptography. I don’t have the proper education to really understand the math behind this kind of cryptography, bu… Continue reading Is this key exchange algorithm secure and valid?
Most of the new authentication solutions (IDaaS) are focused on HTTP (for example implementing SAML and OIDC). What protocols does Active Directory support, that are not normally supported by IDaaS?
Continue reading What protocols are authenticated by Active Directory?