-
The E2EE document describe a scheme where PBKDf2 is used on a ''private'' URL to derive an initial encryption scheme.
This is weak in various ways:
- It relies on keeping a URL secret
- It relies o…
simo5 updated
3 years ago
-
# Background
Recently, we've discussed at length how we might improve the performance of the platform, while not compromising security. One of the more obvious levers to pull is to improve the perf…
-
WAMP-cryptosign is an asymmetric key, signature based authentication scheme that is defined by two parts:
1. the message exchange pattern (authentication handshake) and construction of challenge to…
-
Let’s create an index of deadlines both in industry and government for reference.
Summary of the below comments:
| Organization, Standard, Agency, or Browser | TLS 1.0 Deprecation | TLS 1.1 Dep…
-
In there are numerous claims that Ed25519 should be preferred over P-384.
> ECDSA is much more dangerous to implement than Ed25519
> If you're concerned about NSA backdoors, don't use v3 (which…
-
I did a small program that does a SftpClient connect call.
When I run the program on
a Windows 10 PC that I have administrator permissions, all works built with Visual Studio 2015
When I run the …
-
Websites which activate TLS 1.0 and TLS 1.1 can still get away with Grade A.
That's very misleading!
- an active TLS 1.3 should result in an A++ grade, if anything else is OK.
- TLS 1.2 should b…
-
At Red Hat, we set the SECLEVEL to 2 in DEFAULT and LEGACY policies (in crypto-policies [1], not providers). So when SECLEVEL 2 is in use, the creation and verification of SHA-1 signatures is rejected…
-
There are some concerns regarding implementation of crypto functions in libtpms in order to get FIPS compliancy.
Most of the crypto functions in libtpms come from the specification
https://trusted…
-
The System.Security.Cryptography namespace contains several commonly used cryptographic algorithms. I propose the addition of two commonly used algorithms which are currently missing:
- **Ed25519** is…