New answers tagged cryptography
0
votes
TLS- Concept of channel binding
While other answers are correct, I believe NTLM relaying against ADCS should be present here as a great example. The attack is described here in detail:
https://www.exandroid.dev/2021/06/23/ad-cs-...
- 1,760
0
votes
How to get a 12 bytes authentication tag in AES-GCM
Technically, you can't do this. GCM is defined such that the authentication tag is a point in the Galois field GF(2^128), which requires 128 bits (16 bytes) of data to specify. In other words, the tag ...
- 46.4k
0
votes
Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User
You can avoid transmitting the private key by using a Session key, a single-use symmetric key, to encrypt each file or set of records.
Steps to encrypt
Generate a session key S
Encrypt the file using ...
- 111
0
votes
Does self-signed encryption certificate violate "no multi-use keys" principle?
It looks like maybe this is an open question / the answer is "no, there is no best practice, for now; you simply can't sign with a key that doesn't support signing."
See IETF Internet-Draft ...
2
votes
Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User
I am afraid that whatever you do to pretend that you have no access to that data, it will be close to snake oil security. The central problem, is that as the data has to be encrypted and decrypted on ...
- 26.5k
1
vote
Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User
One option is to deploy this as a 'zero-trust' application, where all encryption and decryption of medical records takes place on the users' and the doctors' devices; and your server only sees ...
- 22.7k
0
votes
Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User
The system as proposed does not do what you want it to do, as soon as you send the private key, it is no longer private.
In essence what you would like to do, is have a key exchange mechanism that ...
- 8,823
1
vote
Accepted
Why in "openssl pkeyutl -verify" is needed both public and private keys? Why isn't public key enough?
... and there is no option to just use the public key?
This option exists. As documented you have to use the -pubin argument to specify that the key given with -inkey is a public key. You create the ...
- 198k
Top 50 recent answers are included