-
Some users insist on using only cryptography officially sanctioned by their favorite standards body, such as the NIST FIPS-140; notary should at least not make this impossible by design. The following…
-
# Introduction
The Federal Information Processing Standard (FIPS), is a required standard for any software that will be used in the Government of the United States of America or the Government of C…
-
In 800-63b section "5.1.1.2 Memorized Secret Verifiers", BALLOON and PBKDF2 are provided as "examples" of suitable key derivation functions, without mentioning whether they are memory-hard functions o…
-
The blockchains' consensus uses a DAG, which needs to calculate the Hash.
We need to formally pick one.
The leading choice some previous team discussions:
- BLAKE3
- Keccak256 (SHA-3)
Given…
-
The reason that I started contributing to testssl.sh is that I was tasked with developing a test suite that tests a web server's configuration to the[ National Institute of Standards and Technology](h…
-
### What version of Go are you using (`go version`)?
$ go version
go version go1.21.0 darwin/arm64
### Does this issue reproduce with the latest release?
Yes
### What did you do?
…
-
This OpenPGP certificate contains a "1st party approved 3rd party certifications" ([1pa3pc](https://datatracker.ietf.org/doc/draft-dkg-openpgp-1pa3pc/)) signature over its User ID:
```
-----BEGIN …
-
This requirement is a security weakness.
2.7.5 | Verify that the out of band verifier retains only a hashed version of the authentication code.
-- | --
Even 8 numerical digits when hashed are d…
-
Hello,
At my company, we have extremely strict supply chain security requirements. Using a non-Microsoft 3rd party library is unacceptable for our use case. Maintaining our own password hashing imp…
-
After the introduction of NSM8, everyone should pay attention to the post-quantum signature algorithm. Compared with the major signature algorithms of NIST PQC, only the rainbow signature algorithm …