-
Collecting here all the info about passwords and how we manage them. This should be closed when we are satisfied with our level of password security and management procedures.
This is a collection …
-
To: NIST PQC Administrative CommentsSent: January 16, 2024 9:52 AM CSTI'm trying to publish an implementation of Kyber, but I'm worried about liability exposure fro
m patents US9094189B2 and US924667…
-
### Problem Description
Current AdminPKI Klasse B smart cards are not supported. Some support documents are talking about Gemalto IDPrime MD930.
### Proposed Resolution
unknown
### Steps to re…
-
Hi authors, I've noticed that some files, like [this one](https://github.com/twisted/twisted/blob/02a2b658cd1ade5d7f41f97d898913686313e615/src/twisted/conch/scripts/ckeygen.py#L152), still use insecur…
-
**Description**
Now that NIST has [announced](https://www.nist.gov/news-events/news/2022/07/nist-announces-first-four-quantum-resistant-cryptographic-algorithms) the first few quantum-resistant cry…
-
Quantum computers have the potential to break many of the cryptographic algorithms that are currently used to secure communications and protect data. This is because quantum computers can perform cert…
-
As the Quantum Cryptography train moves at a faster pace, I think it prudent we rethink https://github.com/OWASP/ASVS/blob/master/5.0/en/0x14-V6-Cryptography.md to include Post Quantum Cryptography, t…
-
With addition of new KDF algorithms and also with possible changes in list of approved FIPS algorithms there will be algorithms in the default provider that would be eligible for FIPS validation in th…
-
The docs seem to imply that md5 is the only hash users can use. The vulnerabilities of md5 have made it not usable in many organizations which require a certain level of security.
Is the a way to u…
-
Right now, there are two ECDSA implementations in the repo. One uses the curves implemented in `Common/`, and one defines all the legal curves in the same module as the signature implementation.
I…