It seems both -kfile and -pass can be used to encrypt files with a 2048 bit keyfile? I don’t understand the difference between the two methods:
$ openssl enc -salt -aes-256-cbc -in inputfile.txt -kfile 2048bit_keyfile.key
$ openssl enc …
I am trying to piece together some information about the security system in Android. Particularly about how user’s password/PIN is connected with encryption keys in file-based encryption mode. I’m doing this for my university project. I’ve…
https://www.rfc-editor.org/rfc/rfc6749#section-4.1.1 states:
4.1.1. Authorization Request"
"state"
RECOMMENDED. An opaque value used by the client to maintain
state between the request and callback. The authorization
ser…
I recently got a new phone that has various hardware issues with it. As such, before the warranty expires, I need to send it back for repairs. Unfortunately, I already have Google Authenticator authenticating many accounts that I do not wa…
I don’t know all the details of Spectre and Meltdown, but the way I understand it is that they allow reading from memory, not writing to it. Also, I read that at least Spectre can get out of the virtual machine and therefore also affect th…
I have some symmetrical encryption keys (DEK) stored in the database alongside with the encrypted data. DEK’s are encrypted by the public key of the HSM. The application server uses HSM with PKCS11 interface. The key and data decryption is…
Is there any service that provides certified, security hardened Docker images for common platforms like Python, PHP, Node, Java, etc. with 0 major/critical CVEs.
Currently, we are using the ones from RedHat but the problem is, even If I s…
Some illegal ads started showing up on my Android phone as message boxes recently. They are said to be “USSD messages” in an app recording notifications (com.evanhe.nhfree).
There is a Wikipedia article about USSD, but mostly about the pr…
I’ve been reading all I could about this subject for the last couple of days and I can’t decide what would be the best approach.
The only two requirement are:
I need to know the users that are logged in and every session they have, so …
As has become a mainstream news story many times over, some Android phones are being shipped with malware preinstalled, because they go from factory to a second party who adds the malware and then to the US.
What is the strategy for exami…
