SquareRootOfTwentyThree

less info
290 reputation
16
bio website
location Europe
age
visits member for 1 year, 10 months
seen 18 hours ago

Sep
6
comment If we can no longer trust NIST, what are viable alternatives?
ISO has a bad track record for crypto standards (see the severely broken ISO 9796-2 schemes).
Feb
10
comment Encrypt+Signing data: PKCS#7 / CMS or do-it-your-own way?
If .NET does all the CMS plumbing for you, you are indeed shielded from CMS complexity and that may be the right solution. Good CMS libraries are not that common though. My point was more than you can encode into a binary blob your unencrypted and unsigned JSON structures (with any keys and any data you want in them), and only then encrypt the whole blob with GCM. When you load them from the dataase, you decrypt (and by virtue of GCM also authenticate) the blob which can then be decoded into JSON.
Nov
17
comment Most efficient key algorithm for a TLS server key?
@CodeInChaos Clients will mainly be popular browsers. I think ECC is supported (IE8, Chrome, FF10).
Sep
11
comment TPM and storage of keys
How does this answer the question?
Aug
21
comment RSA encryption : How to create “.arm” certificate file for Public key?
@ashish-agarwal Could you post the code (small snippet) for creating the key, and the code that will use it. Besides that, does the command I provided succeed at converting the key? Can the result be used by the client software?
Aug
21
comment RSA encryption : How to create “.arm” certificate file for Public key?
@ashish-agarwal Which software did you use to create the key pair, and which software will clients use to read the .arm file?
Aug
14
comment Mars Curiosity Rover Security
In military communications environments, there exists the concept of black and red networks. The red part is where the secrets are allowed to travel in the clear. It could be related to your "red net".