Collaborate Disseminate
I have the following JavaScript code, is this safe to do?
Generate sibling public/private key pair.
Derive shared key using said key pair.
I am asking this because typically, a shared key is generated using your own private key and someo… Continue reading ECDH algorithm – Is it safe and secure to calculate shared key using sibling public/private key pair? [closed]
This is likely a naïve question, but I’d really appreciate to receive any pointers:
Problem: Users send jobs to a scheduler system such as SLURM, airflow or kubeflow. A job is a docker container plus some input parameters. Some of these in… Continue reading How to pass secret parameters to job schedulers (e.g. SLURM, airflow, kubeflow)?
I’ve been doing a deep dive into how products like Web3Auth work under the hood and wonder if this is a viable approach to building applications where a user can have the convenience of using oAuth to generate and manage a private key. Add… Continue reading Is there a viable zero-knowledge approach for using oAuth to generate and manage private keys?
I have a Python 3 program, and I’m having trouble finding an encryption method that will suit my needs.
Suppose the program is on a thumb drive. I would give the thumb drive to someone else, and they will run it. It will ask them to input … Continue reading Encryption method for file that can only be read by program
I’m working on an assignment that I’m not sure how to approach. I have to emulate a network-attached storage server (NAS) with a possibly compromised server. In practice, I’m creating a local Laravel website to demonstrate security feature… Continue reading Transmission and storage of data on a compromised server
I’m currently implementing a PowerShell script to call the Sophos API (https://developer.sophos.com/intro).
Write-Output "`nEnter the Sophos API key / client secret."
$ClientSecret = Read-Host -AsSecureString
$Ptr = [System.Runti… Continue reading API Client Secrets are Being Logged in Plaintext (PowerShell Logs)
I interact with some API’s that use PKA and I’m looking for the safest / best-practice way to store my secret key. The approaches I know are for example:
Create a 0500 access directory on my server
Within that directory, store the file co… Continue reading Best and safest way to store secret key used for PKA on server?
So a company I work with currently is using a password management system that lets us retrieve the passwords for an application by providing a secure key to an API. Currently, the key is stored in the code of the app so it is passed to th… Continue reading Best Practice for retrieving secrets securely
The thing that helped me to understand what is a "public key" was to parallel it with a door lock:
The door lock is public in the sense that anyone can try to unlock it and the door key is the private in the sense that generally,… Continue reading The difference between a virtual door-lock and a public key [duplicate]
Are there any password managers out there – such as 1password, lastpass, bitwarden, etc – which have support for requiring multiple users to unlock a password?
I’m thinking for example I might have a top-secret password that’s used by my c… Continue reading password manager which requires 2 of 3 users to view a password