New answers tagged

1

It sounds like the only attack you're worried about is that someone might counterfeit one of the IOUs. Therefore, I need to pick something for my IOUs that is hard to counterfeit. This suggests that money is still a good model. I could just say "I'll hire an engraver to engrave some very detailed and intricate plates, mint four certificates from those ...


0

The greatest weakness of this scheme is the use of a "simple pin". A simple pin will only give you as much protection as a simple pin can, regardless of whether you are using a KDF to expand it. If you only allow for 4-digit, numerical pins, then your KDF will only be able to produce 10^4 different keys, which is a trivial number to brute-force. So in this ...


0

This answer is based on the discussion between Schroeder and wtdmn in the comments. Yes, the client's private key (corresponding to the client's public key in the client's certificate) will need to be decrypted in order for the client to establish a TLS connection with the server, using the client's certificate. But, once the client's private key is ...


Top 50 recent answers are included