Tag Info

New answers tagged

4

You are using the expression "zero-knowledge proof" but it does not mean what you believe it to mean. A ZKP proof is a kind of cryptographic protocol by which a Prover demonstrates to a Verifier a given property on a secret value. The proof is "zero-knowledge" if it does not divulge any extra information to the verifier. For instance, suppose that there is ...


1

A plan of action for this is to have regular monitoring and auditing performed on all requests. A little about how SSL CAs work (source: Fox-IT Post Breach of DigiNotar) Current browsers perform an OCSP check as soon as the browser connects to an SSL protected website through the https-protocol3. The serial number of the certificate presented by the ...


1

A stolen CA private key is a bad situation indeed. Response depends on the extent of the breach, and the context. First, it may be so that the CA private key was not exactly stolen, but merely used improperly. For instance, in the case of the Comodo event, the compromise was on Registration Authority accounts. The RA is the component who tells to the CA ...


2

Right now, in X.509, there is no such thing as tracking of a number of uses of a given key. This is part of what is meant by "X.509 is context-free": validation is about whether the certificate path you have in front of you is valid or not, irrespective of whether a similar path or something different was shown to you 5 minutes ago when talking to the "same" ...


1

There is no way to retrieve the PIN and other information of the user through ATM. At max EJ (Log journal inside ATMs) logs transaction details which contain information like account number/PAN (masked)/ amount. But PIN is not logged anywhere. Moreover, PIN is never transferred anywhere unencrypted neither it is saved anywhere in that way. As soon as you ...



Top 50 recent answers are included