Linked Questions

0
votes
1answer
1k views

Is this a secure setup for a Java password manager?

I'm a fairly new to cryptography, but I recently decided to take up the challenge of trying to write a Java password manager that could store passwords on the local machine while still being secure. ...
0
votes
1answer
83 views

Shuffle large string securely

I have a large string that I need to shuffle in a secure manner. It will be around 4000 characters. The resulting permutation of such string, must be one in the set of all possible permutations (4000!)...
0
votes
1answer
1k views

Privacy of web surfing by Free gate

I am connected to the internet in the university where I don't want the administrator or any organization to find out some of the websites and contents I check in them. I'm afraid that they might ...
0
votes
1answer
72 views

Is encrypting and subsequently sending a known clearext string after a Diffie-Hellman bad design?

I'm writing a small protocol that relies on a DH handshake, generation of a shared secret, and subsequent AES encryption/decryption using that generated secret. I want to add a built-in test message ...
-1
votes
1answer
80 views

A proposal to prevent man in the middle attacks

Let us assume that there is a man in the middle who can read (not modify) all the data that's being transferred between a client and the server. We want the client to be able to log in without ...
-1
votes
1answer
238 views

Is this algorithm safe for encryption? (Cryptography Algorithm is provided)

Jasoos (Cryptography Algorithm) I am working on encrypting and decrypt web application. I have built an algorithm that uses 24 bits long key to encrypt/decrypt the message. Review this algorithm and ...
-1
votes
1answer
864 views

Checksum for authentication - is it reliable?

I've just made the prototype for my new secure password-based authentication method, but there are several doubts about chosen size of password and alphabet. The method is simple - user calculates the ...
-1
votes
1answer
271 views

Is my hashing technique secure? [duplicate]

I am not sure if this is the best place to post this type of question. I have come up with function which, I believe, is a very secure method of hashing. (I could be completely wrong). Here's the ...
-2
votes
1answer
115 views

password hashing: maximize collisions for storage of password history

For a user's active login, clearly it's best to use the slowest algorithm possible with the least collisions possible in order to prevent an attacker from signing in as another user. When it comes ...
-2
votes
1answer
610 views

Is rolling your own network protocol insecure? [closed]

By now, everyone on here should know that rolling your own crypto is bad. But what's about rolling your own (encryption supporting) network protocol? I'm working on an open-source project (by now it'...
3
votes
0answers
76 views

Is this JWT/JWS authentication scheme missing anything important to security? [Educational Question Only]

I'm using the following authentication scheme for my current MERN project. I'd like to know if it's secure, particularly the renewal approach (more details after the description). User signs in over ...
3
votes
0answers
82 views

Could this authentication/authorization flow be attacked without compromising the Authority Server?

I am trying to come up with (at this time) server-to-server distributed authorization/authentication that would have (near) the same advantages as OAuth2 but without it's drawbacks. Is there any ...
1
vote
0answers
42 views

Revocation list for a custom solution

If I have a network of machines inside a company that use certificates for various services. All of these services and machines are internal and never have to deal with public facing technologies or ...
1
vote
0answers
107 views

Using ED448 (or other elliptic curves) for password hashing

I was thinking about a password hashing scheme that would work roughly as follows. for i:=0 to n do password = HASH(password) private_key = GenerateRandomKey(ED448) public_key = GetPublicKey(ED448,...
0
votes
0answers
105 views

Custom password security algorithm? [duplicate]

How secure would it be if you applied custom algorithms (that you obviously wouldn't reveal to the public) to a hashed password? Like splitting up a hashed string, shuffling it around, possibly even ...

15 30 50 per page
1
2 3 4 5
8