| bio | website | |
|---|---|---|
| location | Europe | |
| age | ||
| visits | member for | 11 months |
| seen | May 11 at 7:33 | |
| stats | profile views | 7 |
|
Feb 10 |
comment |
Encrypt+Signing data: PKCS#7 / CMS or do-it-your-own way? If .NET does all the CMS plumbing for you, you are indeed shielded from CMS complexity and that may be the right solution. Good CMS libraries are not that common though. My point was more than you can encode into a binary blob your unencrypted and unsigned JSON structures (with any keys and any data you want in them), and only then encrypt the whole blob with GCM. When you load them from the dataase, you decrypt (and by virtue of GCM also authenticate) the blob which can then be decoded into JSON. |
|
Feb 10 |
answered | Encrypt+Signing data: PKCS#7 / CMS or do-it-your-own way? |
|
Nov 27 |
answered | Are there any hardware HSMs that can host/run custom applications using the HSM processor(s) within the hardened security boundary? |
|
Nov 27 |
answered | Do I need to keep the NTLM token in the HTTP Authorization header a secret? |
|
Nov 18 |
awarded | Scholar |
|
Nov 18 |
accepted | Most efficient key algorithm for a TLS server key? |
|
Nov 17 |
awarded | Student |
|
Nov 17 |
comment |
Most efficient key algorithm for a TLS server key? @CodeInChaos Clients will mainly be popular browsers. I think ECC is supported (IE8, Chrome, FF10). |
|
Nov 17 |
asked | Most efficient key algorithm for a TLS server key? |
|
Nov 10 |
awarded | Editor |
|
Nov 10 |
revised |
Android and AES side channel attacks added 18 characters in body |
|
Nov 10 |
answered | Android and AES side channel attacks |
|
Oct 5 |
answered | What is SHA-3 and why did we change it? |
|
Sep 11 |
comment |
TPM and storage of keys How does this answer the question? |
|
Aug 21 |
comment |
RSA encryption : How to create “.arm” certificate file for Public key? @ashish-agarwal Could you post the code (small snippet) for creating the key, and the code that will use it. Besides that, does the command I provided succeed at converting the key? Can the result be used by the client software? |
|
Aug 21 |
comment |
RSA encryption : How to create “.arm” certificate file for Public key? @ashish-agarwal Which software did you use to create the key pair, and which software will clients use to read the .arm file? |
|
Aug 21 |
answered | RSA encryption : How to create “.arm” certificate file for Public key? |
|
Aug 14 |
comment |
Mars Curiosity Rover Security In military communications environments, there exists the concept of black and red networks. The red part is where the secrets are allowed to travel in the clear. It could be related to your "red net". |
|
Jun 20 |
awarded | Supporter |
|
Jun 6 |
awarded | Teacher |