Tagged Questions
1
vote
1answer
138 views
Exchange of DEK and KEK (encryption keys) between app server and key server
In my application, it is required to encrypt a user's data before inserting it into the mysql database. I am using AES algorithm to encrypt the data using a 256 bit hash (and is calling it Data ...
10
votes
1answer
387 views
XKCD #936: under what assumptions is 1000 guesses/second over a network plausible?
In XKCD #936, a rate of 1000 password guesses/second is proposed as a "plausible attack on a weak remote web service". Under what assumptions is this rate plausible? It seems much too high to me. I ...
2
votes
3answers
142 views
Secure device pairing protocol
I need to implement secure pairing between two devices based on a short shared PIN code with no trusted third party. If you think about the way bluetooth devices pair you won't be far off -- my ...
2
votes
1answer
194 views
Is SSL session based only? Is there a (formal) definition of an SSL connection?
In various docs on SSL there is a mention of connection.
But from the context I am not sure if this means the underlying TCP connection or the SSL connection.
I am thinking that there is no SSL ...
3
votes
1answer
1k views
Recommended Cipher Suites for TLS 1.0, 1.1 and 1.2
There are a lot of cipher suites defined in the in the specifications itself of TLS 1.0, 1.1 and 1.2. And furthermore, there exist RFCs which add even more cipher suites to a specific version (e.g. ...
0
votes
1answer
664 views
Juniper SRX210, how to make port forwarding work? [closed]
I have a PC 192.168.1.151 which needs 554 and 9001 publicly available. So I used the following configuration but it does not work. Can anyone see my mistake ?
version 10.0R3.10;
system {
...
5
votes
2answers
3k views
Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?
We know that WPA/WPA2-PSK uses a PTK (Pairwise Transient Key) for each client to encrypt the communication. This PTK is generated through the process known as 4-way handshake. As told in the related ...
4
votes
2answers
408 views
Which is the easiest secure file transport protocol to implement (SFTP, FTPS, HTTPS, FTP over SSH, FTP over IPsec)
I have to select a secure file transfer protocol, to be implemented in a pre-boot system. I have access to libraries with the basic network functionalities (IP, TCP, UDP, etc...). I might also have ...
1
vote
5answers
2k views
How to properly encrypt a communication channel between a client and a server (without SSL)?
I have a poor knowledge in the world of cryptography, I'm just starting to learn it so I'm a newbie :)
As a project for getting into the field of cryptography I want to write a client\server program ...
21
votes
3answers
2k views
How does Convergence (CA replacement) prevent its notaries from being MITM'd as well?
I have been looking into Convergence and how it works, but I cant figure out how it is effective against a MITM attack that happens near the target system. My understanding is that Convergence works ...
6
votes
2answers
1k views
Dictionary Attack on Wifi
I know a few people with pretty weak passwords. What kind of systems exist to prevent dictionary attacks? Would it make sense to restrict the number of connection attempts in a certain timeframe?
...
10
votes
1answer
564 views
Native rsync protocol security
Is the native rsync protocol (port 873) secure? Does it encrypt data or credentials?
I'm planning on using rsync to store encrypted files in the cloud, I'm wondering whatever the password is ...
2
votes
2answers
157 views
Which private-key encryption should I use for server to server communication?
I am tempted to write my own which covers:
Checksum to ensure data is not tampered with.
Long and multiple rotating keys so that it is (practically) impossible to decrypt.
Will use /dev/random for ...
7
votes
2answers
447 views
Any advantage to securing WiFi with a PSK, other than to keep out unauthorized
As I understand WiFi with a PSK, such as WPA(2)-PSK or WEP, anyone on the same network can decrypt anyone elses packets because everybody has the same key.
In which case, if you are not going to ...
13
votes
1answer
487 views
Are there any security problems with Google false start for TLS?
Google recently announced false start in Chrome browsers which increased TLS performance by 30%
http://news.softpedia.com/news/Google-Chrome-s-SSL-False-Start-201253.shtml
I know TLS has been poked ...
0
votes
2answers
162 views
How to find out the Chaff packets of WEP?
I have a cap file in which i have lots of 802.11 packets encrypted with WEP key. The problem is lots of Chaff packets of WEP is included in that. I want to remove the Chaff packets and crack the key. ...
5
votes
1answer
595 views
TLS at layer 4 BUT 802.1X EAP-TLS at layer 2?
In the CISSP books, SSL/TLS has been through the arguments and fell rest onto the transport layer 2 instead of the session. OK - Fine.
Port security 802.1X and EAP is a data link layer 2 ...
2
votes
1answer
390 views
IPV6 Cryptographically Generated Address implementation
I am looking to an Cryptographically Generated Address (CGA) implementation in Java or in C++.
Would be glad if someone can help.
6
votes
1answer
143 views
Wireless auto-join on laptops
Maybe I have the wrong idea but this is a question that has been floating in my head for some time.
Whenever you use an iPhone (or a Mac, Apple products seem to be more prone to this because it ...
23
votes
3answers
14k views
What is the difference between SSL vs SSH? Which is more secure?
What is the difference between SSH and SSL? Which one is more secure, if you can compare them together?
Which has more potential vulnerabilities?
10
votes
6answers
305 views
Should we configure all devices to never request SSL 2.0, and reject it if offered?
In an effort to reduce man in the middle attacks, when will it be (or was it) an industry accepted practice to reject SSL 2.0 connections on the client and server side?
Is configuring this on a proxy ...
13
votes
4answers
696 views
IPsec (Internet Protocol Security) facts
Internet Protocol Security (IPsec) is a successor of the ISO standard Network Layer Security Protocol (NLSP). What are the advantages, disadvantages, other interesting facts regarding the protocol?
