Questions tagged [cryptography]
Cryptography is the collective term for algorithmic techniques used to secure data from unauthorized entities.
126
questions
0
votes
0
answers
15
views
GPG allows importing an invalid secp256k1 public key
I came across a PGP public key that seems invalid. The key is a secp256k1 public key that supported by GPG. In fact, GPG allows importing that key even if it has an invalid secp256k1 public key inside....
- 121
0
votes
0
answers
264
views
Exporting non-exportable private key for .cer from Windows Certificate Manager
Problem
Like many others, I am trying to export the private key associated with my .cer file to convert to .pfx. There are a number of hacked solutions e.g. https://stackoverflow.com/questions/...
- 131
0
votes
0
answers
44
views
How to store Secrets on docker-compose.yaml as variables
Is it possible to store secret variables as environment variables in linux and store them in hashed format and how to call them in docker-compose.yaml file. What are the best practice in storing ...
- 53
1
vote
0
answers
416
views
Timeout using cryptsetup passdev in crypttab
firsty I know it is not very safety storing the key on a stick but I am lazy and let's say I run around with a implanted usb-drive ;-)
The scenario is the following.
Disks:
sda ...
- 11
0
votes
0
answers
35
views
Where does .NET CNG AES ECDH provider store its keys?
We use a .NET application that uses CNG AES elliptic curve cryptography for data exchange. Each client generates its key pair and stores it somewhere, and it also stores all other clients' public keys....
1
vote
0
answers
217
views
Convert Tor keypair to hex or base64 format
I just generated a Tor key with mkp224o, and I ended up with this (example) output file:
== ed25519v1-secret: type0 ==∏ —
¯£«•
UJ’Î˙Ù¬
§π¯_˚ÑÆE Œ«ß˝†òyflsk¸¬ì–Ôâm
ù≤Ü(~”ö}Ù
I want to get a ...
- 141
6
votes
1
answer
904
views
How do I sign a file using SSH and verify it using a certificate authority?
I would like to give a selected number of developers ability to run code on a system, and verify it using OpenSSH's -Y verify feature.
# Generate the certificates, and sign the dev cert with the root ...
- 203
0
votes
0
answers
111
views
Renew a self-signed certificate
Let's say I have a self-signed X.509 certificate:
file some.bin
some.bin: Certificate, Version=3, Serial=00ea5db390c4cc0de3, Issuer=Some Certificate, not-valid-before=2022-08-02 06:51:44 GMT, not-...
- 4,868
0
votes
1
answer
166
views
Duplicity cron not working
I'm trying to run Duplicity backups via a cron script with --encrypt-key and a GNUPG key ID (from gpg --list-secret-keys).
It's failing with /root/backup.sh: 5: --encrypt-key: not found but if I ...
- 170
1
vote
1
answer
286
views
Are RSA and ECC certificates interchangeable?
Can I use a ECC certificate if a service/software (according to documentation) requires an RSA certificate? Does the software need explicit ECC support?
- 11
1
vote
1
answer
88
views
How can I use zero-knowledge proof as a user to encrypt a text document?
I have a text document for which I don't want to reveal the whole contents, but I want to release some information about it in advance to claim the originality later. For example, if the text document ...
- 11
0
votes
1
answer
1k
views
How to convert this file into PNG
I have a file with no extension (as far as I can tell) that consists of special symbols. (File: https://drive.google.com/file/d/1h9MuUDfDtGEneEzZMNKLKWwY7JjZlBTS/view?usp=sharing)
Here're a couple of ...
- 3
0
votes
1
answer
66
views
UEFI Encrypt disk on boot
I want to make UEFI/UFI encrypt disk with AES on boot, is it possible?
If yes, how can it be done?
1
vote
1
answer
2k
views
How can I convert my plain text (r,s) signature to a format that openssl can verify?
I have my (r,s) in the following format: ["r","442ca7cb054a9862ed93848cc13e0134968eba79db89e0e6f9ded510149aacd1","s","...
- 13
0
votes
1
answer
57
views
How is the certificate encrypted?
I want to get an Apple CA certificate from the link https://setup.icloud.com/setup/qualify/cert?ver=P1.10.1 but I get an unclear file.
How is it encrypted? Or how can you open it? i tried to save it ...
- 3
3
votes
2
answers
492
views
How should eMMC RPMB shared keys be stored?
Storing data in the eMMC Replay Protected Memory Block (RPMB) requires use of a shared key. RPMB read/write operations utilize the shared key to generate a Hashed Message Authentication Code (HMAC).
...
- 31
-1
votes
1
answer
173
views
Cant we use md5 like hash algorithms to store big data?
i've read a paper about how hash algorithms word in general and i saw one strange thing.
MD5 input length is unlimited and the output length are always the same
so isn't that mean you can turn any ...
- 105
0
votes
0
answers
615
views
How to do a clean installation of Windows 10 while keeping BitLocker enabled?
I didn't want to have to disable the bitlocker to format the PC, because that would definitely make it possible to recover data that has not been rewritten, and I value the security and privacy of my ...
- 1
2
votes
1
answer
1k
views
How to blacklist certain ciphers and key exchange algorithms in ssh and sshd
To get a list of all supported algorithms, I can run ssh -Q kex, which on my machine outputs
diffie-hellman-group1-sha1
diffie-hellman-group14-sha1
diffie-hellman-group14-sha256
diffie-hellman-group16-...
- 145
1
vote
0
answers
58
views
How can one disable supported crypto groups in Firefox's TLS support
I know how to enable/disable a particular cryptosuite in Firefox, with the settings like security.ssl3.rsa_des_ede3_sha in about:config. But I can't find how to do that with supported field groups, ...
1
vote
1
answer
116
views
How to use b2sum in keyed mode?
Considering using Blake2 (perhaps b2sum) in conjunction to openssl dgst -sha512 -hmac $key but I don’t see an option to enable keyed mode.
- 912
0
votes
0
answers
50
views
How to verify sender email address is really the one displayed?
.Hi experts,
There are ways to fake the sender email address as I have read.
Meaning that if you receive an email, then the"from" email address visible on the frontend in your email client can in ...
- 249
1
vote
1
answer
1k
views
Generate entropy to create RSA keys
I was wondering on how I could make my server as most secure as possible. I use OpenSSH to connect to it, using RSA keys. However, something bothers me about that method: to generate the RSA keys, I ...
- 25
1
vote
1
answer
132
views
Generating (pseudo) random numbers from a log file (eg. /var/log/maillog)
First: I really know that a true random number generator should have real random input, like something that is impossible to predict.
Now, consider this: A busy mail-server can generate tens of ...
- 161
1
vote
0
answers
440
views
What is C# RSACryptoServiceProvider doing under the hood when Encrypting using RSA?
When I drill down into the .Net source code I cannot find the code that actually runs when rsa.Encrypt is called, maybe it's running code within a DLL because I cannot find where the method is ...
- 11
1
vote
0
answers
50
views
How can I run John Walker's ent program effectively on some data streams?
So the original ent program can be found here. The website doesn't give me a sufficient explanation, so I ask, how can I use this program effectively on Windows?
Display Name
2
votes
1
answer
662
views
Convert Openssl explicit ECC public key to named curve public key
While generating ECC keys using OpenSSL we can specify whether we want explicit public key info or named curve.
Named Curve: openssl ecparam -name secp256r1 -genkey -noout -out my.key.pem
Explicit ...
- 21
0
votes
0
answers
866
views
unknown tag 26 encountered bouncy castle exception
unknown tag 26 encountered
at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
at org.bouncycastle.asn1....
0
votes
0
answers
202
views
How to generate different public keys for each user in a system using openssl in linux?
I want to generate private public key pairs for each user(multiple users) in the system. I have the below code to generate that
RSA *rsa = RSA_new();
BIGNUM *bn = BN_new();
BN_set_word(...
- 101
1
vote
1
answer
549
views
Is there a device or executable on Windows that can provide cryptographically secure random bytes via CMD or Powershell?
Essentially, I'm looking for the Windows equivalent of /dev/urandom on Linux.
I know I can use Windows CNG via the C++ APIs, but no idea if there's an available (portable) method to access random ...
- 165
2
votes
1
answer
3k
views
Load key “ec256.pem”: invalid format is thrown on trying to generate public key from private key
I am trying to generate public/private key pair using ECDSA curve secp256k1
On generating public key from ec256.pem (private key) the following error is thrown
"Load key "ec256.pem": invalid format"
...
0
votes
0
answers
35
views
Encoding a PDF using matrix multiplication
I need to encode a patent application in a PDF file using matrix multiplication on Mathematica so I can save it on a cloud storage service so my partner can download the encoded file in Asia and ...
0
votes
1
answer
315
views
How can I show installed CSP's on my Linux system without using the cpconfig util?
How can I show a list of installed Crypto Service Providers without using cpconfig or csptest? How can I check if there's a CSP on the current Linux system? The system is not mine and I'm told to ...
- 3
3
votes
0
answers
828
views
What is the "TLS_GREASE_BA" cypher in TLS?
I've just ran a client test on SSL Labs Client Tester and my client reports as the favourite cipher suite a cypher named TLS_GREASE_BA with a null key length.
What is this cipher suite supposed to do?...
- 163
2
votes
3
answers
4k
views
How to use MPIR with Visual Studio?
I am an academic and I need to develop some numerical algorithms which require functions from a package called MPIR http://mpir.org/downloads.html. I downloaded the 3.0.0 version and I am trying to ...
- 139
0
votes
1
answer
57
views
HTTPS communication without requesting certificate
Is there a hack or the architecture of SSL/TLS allows communication with a Server without requesting it's certificate may be by pre downloading the certificate and installing it,The reason I'm asking ...
- 61
0
votes
1
answer
2k
views
CertUtil | How CertUtil -verifykeys works internally?
I have a CA certificate in Local Machine Certificate Store.
When I run this command - enter code here
certutil -verifyKeys gives Key "KEYNAME" verifies as the public key for Certificate "KEYNAME" ...
- 103
3
votes
1
answer
864
views
GPG/SSH: Making a key a subkey after the fact
I'm still new to GPG, SSH, and whatnot, and I'm not sure what best practice is.
I have a USB device capable of generating and holding GPG||SSH keys without them leaving the device. It also permits ...
- 151
-4
votes
1
answer
91
views
Can I use currency.js for commercial purposes? [closed]
I working on a cryptocurrency price tracker. I make use of the currency.js library. Can I use currency.js for commercial purposes?
- 107
-1
votes
1
answer
2k
views
create private key from ECDSA public key
Public ECDSA Key Hex :
04d6597d465408e6e11264c116dd98b539740e802dc756d7eb88741696e20dfe7d3588695d2e7ad23cbf0aa056d42afada63036d66a1d9b97070dd6bc0c87ceb0d
Public Address:
...
- 1
-1
votes
1
answer
582
views
Sapphire Nitro+ RX580 8GB Hynix Low hashrate?
I've got Sapphire Nitro+ RX580 8GB [Hynix memory] and it hashes on 21.9 mh/s out of the box without any overclocking or bios modding, as far as I know it should be higher around 24 mh/s, any ideas why?...
- 99
1
vote
1
answer
416
views
gpg2 --edit-key addphoto / keytocard without password prompt
I am trying export subkeys to card for a keyring without any keyboard interaction using the command keytocard. This type of command is the same as addphoto as it requires to edit the keyring with --...
- 41
2
votes
1
answer
1k
views
gpg2 --quick-addkey without password prompt
I am trying generate in bash sub keys for a keyring without any keyboard interaction.
I have tried several approach around what is mentioned here
https://unix.stackexchange.com/questions/60213/gpg-...
- 41
2
votes
1
answer
544
views
Windows 7 EFS, where are the FEK stored?
I feel confuse, I read from many technical doc from Microsoft and wiki. The FEK is generated for each file, and store in the file headers.
But refer to this blog windows-7-how-to-use-cipher-exe-a-...
user193372
1
vote
0
answers
3k
views
How to get RSA Public Key and Private Key and get the modulus and exponent in plain text?
A requirement needs me to
"Create or retrieve user’s RSA-OAEP key. There should be one
public/private key pair for each user for a device"
and send it to the server in this form:
{"modulus":"...
- 133
-2
votes
1
answer
54
views
Are forms of device encryption still bulletproof enough for the average user? [closed]
Even after drive and BIOS encryption, can the data on a device (i.e. a laptop) still be accessed by the thief? (if he/she doesn't have access to the token or password or linked key generator).
...
- 119
-1
votes
1
answer
4k
views
Can You Copy the RAM contents as-is to File-System on Windows [duplicate]
My question: Is it possible to copy the contents of RAM to the file-system? (Windows)
Additionally, is it possible to copy the RAM contents for a specific process?
Reason:
This largely revolves ...
- 203
0
votes
1
answer
223
views
How to Optimize a Dictionary / Word List?
I have a copy of a 4.09 GB wordlist / dictionary crackstation.txt. Just now the words and numbers are arranged in the usual order:
0123456789aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStT uUvVwWxXyYzZ
...
- 1
2
votes
1
answer
529
views
Security: Is the Raspberry Pi really stateless?
The Raspberry Pi has become very popular. Because it is rather cheap and simple it could be an attractive device for people living in so called developing countries.
However in many of these states ...
- 145
2
votes
1
answer
52
views
Can an application that writes any data in a file be suspicious to an antivirus?
I am developing an application that, in order to work, needs to download data from the internet and store it in a .dat file.
The problem is that some of that data is generated by other users. If a ...
- 123