New answers tagged

0 votes

TLS- Concept of channel binding

While other answers are correct, I believe NTLM relaying against ADCS should be present here as a great example. The attack is described here in detail: https://www.exandroid.dev/2021/06/23/ad-cs-...
buherator's user avatar
  • 1,760
0 votes

How to get a 12 bytes authentication tag in AES-GCM

Technically, you can't do this. GCM is defined such that the authentication tag is a point in the Galois field GF(2^128), which requires 128 bits (16 bytes) of data to specify. In other words, the tag ...
CBHacking's user avatar
  • 46.4k
0 votes

Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User

You can avoid transmitting the private key by using a Session key, a single-use symmetric key, to encrypt each file or set of records. Steps to encrypt Generate a session key S Encrypt the file using ...
IsAGuest's user avatar
  • 111
0 votes

Does self-signed encryption certificate violate "no multi-use keys" principle?

It looks like maybe this is an open question / the answer is "no, there is no best practice, for now; you simply can't sign with a key that doesn't support signing." See IETF Internet-Draft ...
JamesTheAwesomeDude's user avatar
2 votes

Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User

I am afraid that whatever you do to pretend that you have no access to that data, it will be close to snake oil security. The central problem, is that as the data has to be encrypted and decrypted on ...
Serge Ballesta's user avatar
1 vote

Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User

One option is to deploy this as a 'zero-trust' application, where all encryption and decryption of medical records takes place on the users' and the doctors' devices; and your server only sees ...
mti2935's user avatar
  • 22.7k
0 votes

Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User

The system as proposed does not do what you want it to do, as soon as you send the private key, it is no longer private. In essence what you would like to do, is have a key exchange mechanism that ...
LvB's user avatar
  • 8,823
1 vote
Accepted

Why in "openssl pkeyutl -verify" is needed both public and private keys? Why isn't public key enough?

... and there is no option to just use the public key? This option exists. As documented you have to use the -pubin argument to specify that the key given with -inkey is a public key. You create the ...
Steffen Ullrich's user avatar

Top 50 recent answers are included