A description and set of rules for the ordered exchange of structured information designed with the goal of protecting the security of the system.
5
votes
5answers
100 views
How secure is using CRAM-MD5 for email authentication, when not using an SSL connection?
Background: My current server-provider tells me it's no problem to store the passwords in plain-text in the database, saying he has to do so because they use CRAM-MD5 for email authentication. My ...
-1
votes
1answer
173 views
What is a man in the middle attack?
My university provided me with the following slide which is confusing me:
From my understanding, what is happening here is that Trudy (Person in the middle) is pretending to be Alice. Bob then ...
2
votes
0answers
15 views
Have I understood pedersen commitment correctly? [migrated]
I want to do a one-sided integer commitment scheme. I.e. the whole process must be non-interactive where I at one point first publicly reveal some data and then at a later time reveal the commited ...
1
vote
1answer
64 views
Symmetric Key Cryptography vs Public Key Cryptography [duplicate]
I understand what the two are so need to go into detail about that, however what I'm curious about is in what kind of situations would we use one over the other? It feels to me as if Public Key ...
3
votes
1answer
79 views
Creation and deployment of self-signed certificates for a two-machine scenario
Let us assume that I have two computers:
client
server
Now, in the server computer, I set up a legacy ASMX web service which will going to be used by the client. Before the client can connect to ...
58
votes
9answers
8k views
What would one need to do in order to hijack a satellite?
I realise this borders on sci-fi, but there's been some interesting demonstrations regarding security of various satellites.
What would be required to hack a satellite (in general terms, any hack ...
-1
votes
1answer
82 views
What service could penetrate my Firewall via UDP on Port 17275?
Has anyone monitored various requests from all over the world on Port 17275 via UDP?
My firewall logs show huge amounts of such requests from lots of different IP Adresses.
I can't find any ...
19
votes
2answers
346 views
Aviation security - Lessons to learn from PlaneSploit
A somewhat related question has already been asked (What would one need to do in order to hijack a satellite?), only at a more abstract level.
Now we have a presentation by Hugo Teso from n.runs AG ...
43
votes
3answers
16k views
What's the difference between SSL, TLS, and HTTPS?
I get confused with the terms in this area. What is SSL, TLS, and HTTPS? What are the differences between them?
11
votes
3answers
1k views
How are mobile telephony networks like LTE and HSPA encrypted?
How are mobile telephony networks like LTE (4G) and HSPA (3G) encrypted? between what parts is the communication encrypted? who has access to the keys? is symmetric or asymmetric encryption used? is ...
5
votes
1answer
257 views
Why is NIST removing & not updating TLS guidance? What is the replacement?
The document NIST Special Publication 800-52 Guidelines for the Selection and Use of Transport Layer Security (TLS) Implementations was retired without superseding it with a newer document.
In ...
1
vote
1answer
168 views
What is the significance of the version field in a TLS 1.1+ ClientHello message?
I am trying to add TLS 1.1 and 1.2 support to a packet capture product which already has TLS 1.0 support.
I have used Wireshark to capture traffic between my browser and an openssl server to generate ...
2
votes
1answer
78 views
tshark - dump the data section
As the name suggests, im trying to dump the data section of the packet,
man would suggest that its something like tshark -r file.pcap -t fields but im not having any luck
1
vote
1answer
55 views
Why should an IKE responder change the cookie secret 'frequently'?
IKEv2 has the concept of a COOKIE mode, to attempt to prevent state exhaustion from floods of initiation requests from non-existent IP addresses:
Two expected attacks against IKE are state and CPU ...
19
votes
3answers
713 views
Preventing artificial latency or “Lag Hacking” in multiplayer games
There is an attack that some people have dubbed "lag hacking", and its gaining popularity in multiplayer games. There are at-least two ways of creating artificial latency. One method of introducing ...
1
vote
1answer
81 views
What is the fight-back mechanism in OSPF?
I want to know more about the fight-back security mechanism in OSPF routing protocol.
When is the mechanism activated and how does it work?
I found the source description of OSPF fight-back, but the ...
1
vote
1answer
86 views
Is it safe to use flex and bison as a protocol parser?
I started writing a a simple protocol lexer and parser for STOMP using flex and bison. Does anyone know of any security issues that might result from this?
Edit: Added code.
%{
/* Tokenizer for ...
2
votes
1answer
162 views
Loki How to crack the password hash OSPF?
I have created for myself a lab of routers in GNS3 . Routing protocol between routers is OSPF.
Now,by Loki penetration testing, I found that routers are the feature authentication.
Using wireshark, I ...
4
votes
1answer
289 views
What changed between TLS and DTLS
What did the DTLS (TLS over UDP) authors have to change so that it could run without TCP?
Bonus points:
Do any of the protocol difference affect the way it should be used, both in terms of interface ...
3
votes
1answer
250 views
Loginless Client/Server Architecture (iOS)
I'm currently in the phase of planing a project involving loginless service.
Users would be identified by an unique device id created on the client (ios).
What are the security concerns?
sockets ...
7
votes
2answers
3k views
What is ECDHE-RSA?
What is the difference between ECDHE-RSA and DHE-RSA?
I know that DHE-RSA is (in one sentence) Diffie Hellman signed using RSA keys. Where DH is used for forward secrecy and RSA guards against MITM, ...
4
votes
2answers
213 views
IPsec - when to use AH only?
As far as I know, AH only covers integrity and authentication. So, suppose that an intermediate router receives the packet with AH and not ESP. Then, can't the router open its content (<- and ...
2
votes
2answers
138 views
How do I correctly select and use a modern symmetric block cipher?
I have founds lots of DON'Ts with Google but so far, no simple resource that would explain to someone like me who knows that he is not smart enough get this right without help how to use correctly a ...
2
votes
2answers
134 views
Access via http to other protocols and ports!
Our firewall only allows HTTP port 80 but we have detected that a user accesses some other protocols and ports that we deny in our firewall.
We know that he has developed an application (Console ...
1
vote
1answer
301 views
POP3S vs POP3 with STARTTLS
can you tell me if there are any differences between POP3S and POP3 with STARTTLS?
What's the safest?
Are there any known attacks?
If you could choose about them, which would you pick?
Thanks a lot
0
votes
0answers
41 views
Establish Security Protocol [closed]
I've been given the transaction below and I am asked the purpose of some of the messages, but before I can do anything I have to establish what protocol it is. I have been pointed in the direction of ...
1
vote
2answers
4k views
Four-way Handshake in WPA-Personal (WPA-PSK)
Can someone explain to me in what consists the Four-way Handshake in WPA-Personal (WPA with Pre-Shared Key), which informations are being sent between AP and client, how is it possible to find the AP ...
7
votes
3answers
171 views
How do I test and secure ASN.1 Parsers?
As far as I can tell, .NET doesn't have an ASN.1 parser for reading or writing data built in the framework. This means that any code that creates or verifies ASN.1 data is using a 3rd party library ...
4
votes
4answers
222 views
Does TCP/IP expose critical infrastructure to added risk?
Background:
I just attended a talk on the security of critical infrastructure. The speaker spoke a bit on how adding the TCP/IP protocol to functions usually taken care of by dedicated protocols open ...
11
votes
1answer
4k views
The inner workings of iMessage security?
This is a very interesting article about the iMessage technology used in Apple's very popular communication devices. So far, there has not been much technical details released by Apple. Hopefully ...
2
votes
2answers
308 views
Vulnerability of a computer behind a serial port?
Let’s consider these 4 computers :
East Coast location :
computer East1 is connected to the internet.
computer East2 is connected to East1 through a RS232 serial cable.
West Coast location :
...
5
votes
1answer
251 views
How do you analyze an unknown network protocol?
Of course Wireshark can be used to sniff traffic - you can inspect each packet or chain of packets.
But how would you do it smarter? Which tools do you use to identify behaviors or to automate the ...
2
votes
3answers
147 views
I want to have the security of my crypto code checked, how should I go about doing so?
Specifically part of my system stores encrypted information in a database. I wrote the code that actually does the encrypting/decrypting using an existing cipher.
How should I go about making sure ...
1
vote
2answers
194 views
Does secure remote password verifier transmission need to happen out of band?
With relation to the necessity of a verifier being transmitted from the client to the server prior to any handshake steps, I was wondering how this is supposed to happen securely? To me this seems ...
1
vote
4answers
274 views
Are there vunerabilities with this authentication mechanism?
I am trying to come up with a way to implement token-based authentication for a REST API without the need for SSL. The goal here is to avoid sending any sensitive information across the wire.
I was ...
0
votes
2answers
222 views
How to safely collect bank account from website?
I want to collect bank account information from my customers on my website.
I'd like to do that through a form, then I will download it to a PC, print it, and then delete it from the website. Or ...
0
votes
1answer
186 views
Amazon S3 Encrypted File Backup System
I am designing my backup system to Amazon S3 (probably Singapore) and I would like to have all my files strongly encrypted on the server. I use ArchLinux x64. My system will append only once an ...
5
votes
3answers
746 views
What makes the Blackberry device and network more secure?
One of Blackberry's strongest assets is the "network" that it uses. Can someone explain, or link to technical information that covers what this secure network is, and what it does better than the ...
9
votes
1answer
582 views
Is there a standard for printing a public key as a barcode?
Is there a standard for storing a public key printed on paper?
Say, I want to hand out business cards with my public key pre-printed on them
at a key signing party to help build the web of trust.
My ...
4
votes
3answers
172 views
Are there a standard method(s) for me to give someone else read-only access to my data?
Are there a standard method(s) for me to give someone else read-only access to my data?
There are several situations where I may want to give a few people read-only access to some data, but I would ...
3
votes
2answers
414 views
Can we prevent a man-in-the-middle attack with symmetric-key cryptography?
Suppose that Alice signs the message M = "I love security" and then encrypts it with
Bob's public key before sending it to Bob. As well known, Bob can decrypt this to
obtain the signed message and ...
4
votes
2answers
1k views
How does Diaspora work?
I hear all this hype about Diaspora being decentralized, but the only information I can find on their official website and the Wikipedia article is that several people can run Diaspora servers. The ...
6
votes
2answers
4k views
The new CCMP attack against WPA/WPA2 PSK
The use of Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) for WPA/WPA2 PSK is being attacked. This is a trivial attack (offline brute force) against the initial ...
9
votes
6answers
2k views
How to implement multi factor authentication using a token generator?
I'd like to implement multi factor authentication on a few projects.
Now the first factor would be username and password, for the second factor I would like to use a token generator.
These tokens ...
7
votes
4answers
1k views
extract from pcap all protocols found
I have some pcap files, and i would like just to get a list of protocols that are present on that pcap file. I would like it in a batch mode, not using wireshark
I think tshark is able to do it, but ...
0
votes
1answer
2k views
If a router has port 5060 open, and I know that there is unencrypted SIP traffic going through this port, how could one take advantage of this
Ok so an Nmap scan against an IP address shows that port 5060 is open. I know that 5060 indicates that this is SIP traffic. Also, 5060 indiciates that this is unencrypted traffic, where if the port ...
0
votes
2answers
108 views
How to find whether a site uses SET
How could I know whether the eCommerce site I use uses SET (Secure Electronic Transaction). I know SET is a standard. But I see only an SSL connection
3
votes
1answer
99 views
What project is a good SILC substitute?
As time has marched on, it would appear that the Secure Internet Live Conferencing (SILC) client/toolkit have lost a bit of steam, I can't find any current mailing lists, their website doesn't seem to ...
1
vote
2answers
880 views
Expected cost and time frame for black box pen testing?
I work for a major publicly traded company and we need some external black box pen testing done on a Win32 executable. This exe is used in a large client server infrastructure and is a central piece ...
8
votes
3answers
1k views
What common products use Public-key cryptography?
I want know what common use products are there that use public key/private key cryptography?
