Linked Questions

-2
votes
1answer
581 views

Is rolling your own network protocol insecure? [closed]

By now, everyone on here should know that rolling your own crypto is bad. But what's about rolling your own (encryption supporting) network protocol? I'm working on an open-source project (by now it'...
0
votes
3answers
351 views

Encryption of TCP communication?

I am using an exe application which is communicating with a Raspberry Pi device with manually configured TCP ports. The application will send data from port 1234 to the Raspberry Pi which is listening ...
-1
votes
1answer
717 views

Checksum for authentication - is it reliable?

I've just made the prototype for my new secure password-based authentication method, but there are several doubts about chosen size of password and alphabet. The method is simple - user calculates the ...
-5
votes
2answers
201 views

Is this Python program secure?

Note: I'm new to information security practices so feel free to point out anything I could be doing better. Situation : I'm currently creating an encryption system for instant messaging and I want to ...
-9
votes
5answers
249 views

Is SSL more secure than encoding?

I am writing a client / server program pair. I have established my own protocol and am communicating with TCP. Presently, when the client messages the server, it adds 42 to each byte (looping, 127 + 1 ...
3
votes
1answer
300 views

How to fix this broken crypto protocol?

I am considering a protocol where you upload a one time pad to a server, using public key encryption and then the result (using the pad) is sent back in plaintext: Alice uses Bobs RSA public key to ...
1
vote
1answer
636 views

What does “don't roll your own security” mean?

I see this saying a lot and agree that you should leave certain things to the tried and true methods, but am unsure to what extent. Does it just mean don't make your own crypto algorithm? I created a ...
1
vote
2answers
147 views

Homebrewing something like SSL

So me and eight other friends have founded a "company" (not official, we just like calling ourselves that) named sDev and we are making a strategy game. We are aged 16-17 and have about 3-5 years of ...
-2
votes
3answers
338 views

AES 256 implementation [closed]

I attempt to estimate the coding requirements and memory size required for an embedded development of AES 256. It seems to be well below 25K lines of code and well below 4MB requirement for memory. I ...
2
votes
3answers
115 views

Is this a secure method of authenticating packets?

I have an client/server architecture that periodically sends very small (10 or so bytes) UDP packets back and forth, which I'd like to authenticate without a large overhead in bandwidth or processing. ...
0
votes
1answer
108 views

Is this strategy end 2 end encryption and secure?

I'm passing sensitive financial data to a payment processor online via cloud functions and would like your expert opinions, please. The workflow is as follows: A customer indicates they want to ...
0
votes
1answer
378 views

Using AES encryption to generate MAC (and provide authentication/integrity)

Ignoring that there are far better and more standard approaches to providing authentication and integrity guarantees, what (if any) weaknesses would a system as outlined below that relies on AES (AES/...
8
votes
4answers
217 views

How much security expertise does a general application programmer need to develop software ethically? [closed]

I am curious about this. I saw this thread: Why shouldn't we roll our own? and this answer: https://security.stackexchange.com/a/18198/144241 which had on it this comment, which had the second ...
2
votes
1answer
271 views

How does limiting the number of results from a SQL query help?

This highly upvoted answer asserts that as a protection against SQL injection, one should always use bound parameters and limit how many results get returned (emphasis mine) Obviously, the advice ...
2
votes
2answers
270 views

Bruteforcing hardware-encrypted SSD

Can you bruteforce a hardware-encrypted SSD drive? I mean recovering the password needed to unlock the drive. Is there any software could do this? Here the focus is the software that could do the job....

15 30 50 per page