Linked Questions

2
votes
1answer
89 views

Is this key exchange algorithm secure and valid? [closed]

I'm writing reliable UDP implementation and I want it to be secure. Also, I want to make use of elliptic curve cryptography. I don't have the proper education to really understand the math behind this ...
1
vote
1answer
143 views

ssl+symmetric with my own encryption algorithm? [closed]

I am a final year student currently doing my project, the title is "Mitigating man in the middle attacks using ssl+symmetric key algorithm". I would like to create my own encryption algorithm. I need ...
0
votes
1answer
82 views

Shuffle large string securely

I have a large string that I need to shuffle in a secure manner. It will be around 4000 characters. The resulting permutation of such string, must be one in the set of all possible permutations (4000!)...
1
vote
1answer
154 views

Client Side Encryption algorithm: security + is padding algorithm needed in this case?

I will be using CSE for a web application as follows. Generate a random AES key Encrypt the cleartext data with this AES key Encrypt the AES key with the service's public key, using RSA Obviously, ...
0
votes
2answers
54 views

Data Transport Encryption - Small Scale Solution

I have a web based application for a network that needs to be able to run without internet access. I have wanted to add TLS to protect certain data in transport. I have explored options like Lets ...
-3
votes
3answers
113 views

Strong file encryption for sensitive data [closed]

My first question: Our new app will work with files that contains sensitive data (e.g. finances). These files will be stored on the client first than synchronized to our server. I need a method for .....
1
vote
0answers
106 views

Using ED448 (or other elliptic curves) for password hashing

I was thinking about a password hashing scheme that would work roughly as follows. for i:=0 to n do password = HASH(password) private_key = GenerateRandomKey(ED448) public_key = GetPublicKey(ED448,...
2
votes
1answer
79 views

Is it OK practice to use the same public and private keys for TLS and to generate JWTs?

. . . Or is that discouraged, and it's better to use separate key pairs for TLS and JWT? (It would be slightly easier to manage one key pair only, but probably better security to use two separate key ...
0
votes
0answers
99 views

Custom password security algorithm? [duplicate]

How secure would it be if you applied custom algorithms (that you obviously wouldn't reveal to the public) to a hashed password? Like splitting up a hashed string, shuffling it around, possibly even ...
-3
votes
3answers
126 views

Is this hypothetical system secure?

I would like to build a simple system, are there any obvious security flaws in it? Will this hashing mechanism be fairly secure without any other layers of encryption? I have a simple module where ...
0
votes
1answer
72 views

Is encrypting and subsequently sending a known clearext string after a Diffie-Hellman bad design?

I'm writing a small protocol that relies on a DH handshake, generation of a shared secret, and subsequent AES encryption/decryption using that generated secret. I want to add a built-in test message ...
0
votes
1answer
49 views

Trustable Sources For Security Algorithms and Standards?

I am learner of cryptographic algorithms and security standards. I usually Google it to understand the basics of the algorithm or the protocol, and to find an implementation of a protocol. However I ...
3
votes
0answers
81 views

Could this authentication/authorization flow be attacked without compromising the Authority Server?

I am trying to come up with (at this time) server-to-server distributed authorization/authentication that would have (near) the same advantages as OAuth2 but without it's drawbacks. Is there any ...
3
votes
0answers
75 views

Is this JWT/JWS authentication scheme missing anything important to security? [Educational Question Only]

I'm using the following authentication scheme for my current MERN project. I'd like to know if it's secure, particularly the renewal approach (more details after the description). User signs in over ...
0
votes
1answer
42 views

Algorithms for 2FA over HTTPS?

I'm developing an Authenticator App for use towards my own API. I know about the TOTP standard RFC 6238 and the HOTP variant. Though I would prefer to use a public/private key based solution (by only ...

15 30 50 per page
1
4 5 6
7
8