Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our Questions

0 votes
1 answer
43 views

Is api encryption key vault services really secure?

1 vote
1 answer
466 views

How to get Future Keys (Session Key) from IPEK for decryption data?

17 votes
3 answers
2k views

Can RSA keys be swapped?

0 votes
1 answer
33 views

I'm testing an app that uses only v4 UUIDs as a cookie for authentication. What are some attacks I can try?

0 votes
2 answers
235 views

X509 / SSL certificates in practise

4 votes
2 answers
2k views

How Does Telegram's Identity Verification Work?

107 votes
6 answers
31k views

Why can't I MitM a Diffie-Hellman key exchange?

5 votes
1 answer
1k views

Tor: Is a Diffie-Hellman key exchange being done over recipient of traffic?

6 votes
3 answers
694 views

DHE exchange and client authentication

1 vote
0 answers
87 views

How exactly does OpenVPN's tls-auth option apply HMAC to packet messages?

1 vote
2 answers
372 views

How to safely use a Key Derivation Function to secure private data - need guidance

1 vote
2 answers
216 views

Asymmetric Encryption on User Data to Allow Unauthenticated Input

6 votes
2 answers
14k views

How does the meet in the middle attack work on double DES?

1 vote
1 answer
42 views

Is providing a static TLS key during an OpenVPN handshake useless for commercial providers?

Browse more Questions