I know, that one can force GnuPG to use AES256 for encryption with
gpg –cipher-algo AES256
or with a special setting in ~/.gnu/gpg.conf.
But, what is the default cypher algorithm for GnuPG, if I would miss this switch?
I read in the OWASP cheat sheet regarding certificate / public-key pinning that “Google rotates its certificates … about once a month … [but] the underlying public keys … remain static”.
Increasing the fre…
As far as I know, Curve25519 offers “only” a security level equal to an 128bit symmetric cipher.
I’d like to know if there are new (not NIST) curves, which provide a security-level comparable to a 256bit cipher AND already used by some app…
I’ve heard many suggestions as to what makes a good password (hard to guess, not a dictionary word or permutation thereof, at least a certain length, etc.) so that it cannot be cracked in a realistic amount of time. However, from what I un…
What does PIN encrypted under LMK mean? From what I understand the Local Master Key is only there to encrypt other keys. I was reading some code and I saw function names like encryptClearToLmk or decryptLmkToClear.
Does the expression hav…
Today, we’re releasing the Enhanced Mitigation Experience Toolkit (EMET) 5.2, which includes increased security protections to improve your security posture. You can download EMET 5.2 from microsoft.com/emet or directly from here.
Following is the list…
How can I get the name of a Key Container that’s in a smart card required for initialization of CspParameters?
CspParameters^ cspa = gcnew CspParameters(ProviderType, ProviderName, keyContainerName, cryptoSecurityKey, securityString);
RS…
In November of last year, we uncovered a major flaw in iOS we dubbed
“Masque
Attack” that allowed for malicious apps to replace existing,
legitimate ones on an iOS device via SMS, email, or web browsing. In
total, we have notified Apple of fi…
In November of last year, we uncovered a major flaw in iOS we dubbed
“Masque
Attack” that allowed for malicious apps to replace existing,
legitimate ones on an iOS device via SMS, email, or web browsing. In
total, we have notified Apple of fi…
Now I assume that everyone knows of aircrack-ng and John The Ripper with it’s fantastic ability to pause and resume cracking.
With that aside, I want to add Crunch into the mix, however I can’t seem to add crunch to it.
The plan as goes:
…
