-
Currently, restic threat model assumes that host which is being backed up is fully trusted; that assumption is reasonable. For certain backends, there is a support for an _append only_ mode, which hel…
-
![image](https://user-images.githubusercontent.com/12871721/92997200-66d86a00-f54c-11ea-9e86-609686660997.png)
![image](https://user-images.githubusercontent.com/12871721/92997183-43adba80-f54c-11ea-…
-
For FCS_CKM.5, there are specific requirements on TwoStep KDFs:
** If an AES-CMAC (with key length 128, 192, or 256 bits) is used in the randomness extraction step, then AES-CMAC with a 128-bit key i…
jvdsn updated
1 month ago
-
A secret key could be supported like in [Argon2](https://www.rfc-editor.org/rfc/rfc9106.html#section-3.1). However, I'm not convinced this is a good idea because encrypting password hashes is [prefera…
-
Is there any way for one C extension to safely link against another?
Looking at the external symbols in `openssl.so`, I see the following:
````
$ nm tmp/x86_64-linux/openssl/3.0.2/openssl.so |
…
-
Is it possible to use the Yubikey challenge-response secret (hex string) to decrypt a KeePassXC database using the KeePassXC yubichallenge implementation? I like how you guys implement the Yubichallen…
-
System: Chimera Linux ppc64le, clang 17.x, musl libc; hardware is POWER9. This is our build template for openssl: https://github.com/chimera-linux/cports/blob/93f6a0f00cc8bde9ee10f695210b2d5e78045040/…
q66 updated
10 months ago
-
In https://github.com/openpgp-pqc/draft-ehlen-openpgp-nist-bp-comp/issues/10#issuecomment-2220090284 Quynh states that the current construction with a key derivation step in ECDH-KEM is not NIST compl…
-
Hello there
I am trying to build wolfssl to use with libz-ng , nginx ,wolfclu, xtls/xray-core , with tls1.2-1.3 also with dtls1.2-1.3 and post-quantum compability options in a debian based linux x86_6…
-
While working on #4833 I encountered a problem with cracking openssl encrypted private key files. It does work with the [example key](https://github.com/openwall/john-samples/tree/main/PEM) but not wi…