Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 1211

Cryptography is the practice and study of logical means used to achieve information confidentiality, integrity and authenticity. It covers, among other things, encryption (making some data unreadable except for those who know a given secret element, called a key), data hashing (in particular for password storage) and digital signatures (provable integrity and authenticity with non-repudiation).

2 votes

Slow client key exchange in TLS?

After your client receives the server's certificate, It could be that the client tries to check certificate revocation. Save the server's CA certificates to a file and use the -CACert argument (or - …
ixe013's user avatar
  • 1,932
3 votes
Accepted

When should I use Message layer encryption vs transport layer encryption

Message based makes it possible to keep confidentiality of the message even on every hop, i.e. the hop does not need to decrypt the message just to and encrypt it again for the next hop. I beleive thi …
ixe013's user avatar
  • 1,932
17 votes
Accepted

MAC vs Encryption

Encryption provides confidentiality, a MAC provides integrity. Using encryption alone makes your messages vulnerable to a ciphertext only attack. An example will make it more clear. Say you send a m …
ixe013's user avatar
  • 1,932
5 votes

When using AES and CBC, can the IV be a hash of the plaintext?

Short answer : IV must be random and sent in the clear. You must be carefull not to leak information about the plain text in your hash. It must not be possible to get to the plain text with a rainbo …
ixe013's user avatar
  • 1,932
1 vote

chosen plaintext attacks against MD5 and SHA1

Yes, it is still a problem with SHA1. It is irrelevant of the actual hashing algorithm, apart that the attacker will need more space to store lookup tables, and maybe a little more time computing them …
ixe013's user avatar
  • 1,932
0 votes

TLS Renegotiation Indication Extension vulnerability

(This vulnerability assumes you have a man-in-the middle, or MITM. I see it as a way for the MITM to establish a two way SSL connection to a server without the client's private key. How you got a MITM …
ixe013's user avatar
  • 1,932