|
I am developing a client server app that uses ssl (openssl) to establish a secure communication channel between the client and the server. I believe I have two options now for secure data transfer between the client and the server. One option is to continue...
Started by msvcyc on
, 3 posts
by 3 people.
Answer Snippets (Read the full thread at stackoverflow):
This symetric key is then used throughout SSL uses a symmetric cypher ....
Ssl uses an asymetric key (defined in the certificate) to pass a autogenerated symetric key between the client and the server.
You are mixing things up.
|
|
If we consider Man In the Middle Attack; Can such an attack occur if symmetric keys are used?
Started by CGF on
, 6 posts
by 6 people.
Answer Snippets (Read the full thread at stackoverflow):
However what SSL/TLS does.
The trick is to agree on the symmetric key browsers' SSL sessions) is that you use asymmetric cryptography to exchange the symmetric key.
With your fake key and pass on to the other end.
|
|
I'm not a cryptography expert, I actually only have a little bit of experience using it at all. Anyways, the time has come where one of my applications demands that I have some encryption set up. Please note, the program won't be managing anything super...
Started by Crowe T. Robot on
, 4 posts
by 4 people.
Answer Snippets (Read the full thread at stackoverflow):
If you're sending the session id in plaintext, and using it as the encryption key, how.
Include a Blowfish encrypted message, using the corresponding Session ID as the key to encrypt / decrypt.
|
Ask your Facebook Friends
|
Hello,
I need to encrypt several parameters in a request (with Java, AES(cbc), 128 BIT Key):
String toencrypt = "name+birthdate+appid+userid"
I have to assume that an attacker can guess all the values. What does this have for an impact on guessing/finding...
Started by Markus on
, 4 posts
by 4 people.
Answer Snippets (Read the full thread at stackoverflow):
So if you use the same data for both IV and key, there's a possibility from known IV to key requires....
Are assumed to be known.
Init vector, key derivation algorithms etc.
By definition, only the encryption key is secret.
To it.
|
|
Hi, I am trying to encrypt data in SQL Server via a Symmetric key. When a user submits data through a web form, I would like for the data to be encrypted, using my Symmetric Key that I have saved inside the SQL Server. I am trying to find out how to do...
Started by Tomaszewski on
, 4 posts
by 4 people.
Answer Snippets (Read the full thread at stackoverflow):
Server documentation also indicates that neither the key nor certificate should have quotes around.
|
|
I've never had to deal with PCI compliance before. I've been reading their documentation and it says I need to protect the credit card number, expiration date and the card holder's name. No storage of security codes ever.
In their documentation, it just...
Started by Gromer on
, 3 posts
by 3 people.
Answer Snippets (Read the full thread at stackoverflow):
The most difficult part is one you havent really mentioned... .
Performing authorization)
Regarding certificates/keys - you could just use one key for encryption (non card related) data that is encrypted, then use a seperate key for that.
|
|
My company is going to be storing sensitive data for our customers, and will be encrypting data using one of the managed .NET encryption algorithm classes. Most of the work is done, but we haven't figured out how/where to store the key. I've done some...
Started by Daniel Schaffer on
, 12 posts
by 9 people.
Answer Snippets (Read the full thread at stackoverflow):
Have, but so long as you....
You can encrypt the symmetric key using another symmetric key that is derived from a password using something like PBKDF2 .
But they don't scale - all encryption/decryption passes through the chip .
|
|
For my iPhone application, Apple wants to know if my password encryption (md5) is greater then 64-bit symmetric or greater then 1024-bit symmetric. I have not been able to find it online, so I am wondering if anyone knows the answer. In addition, is this...
Started by PF1 on
, 6 posts
by 6 people.
Answer Snippets (Read the full thread at stackoverflow):
A symmetric key would be your secret key and asymmetric your public keymd5 isn't really symmetric or asymmetric encryption because it isn't reversible either symmetric or asymmetric....
There's an answer to this question.
|
|
I am after a symmetric encryption/decryption routine in C#. I know there have been a few questions on this topic before, but most of the answers seem to be about the philosophy of encryption rather than giving actual code.
What I really want is someone...
Started by CraigS on
, 6 posts
by 6 people.
Answer Snippets (Read the full thread at stackoverflow):
Out of curiosity....
Then use, or whatever.
This way you can then choose the correct your text, key and initialization vector to bytes first using the encoding of your choice.
A symmetric algorithm a secure key and IV is generated for you.
|
|
We are looking to do some heavy security requirements on our project, and we need to do a lot of encryption that is highly performant.
I think that I know that PKI is much slower and more complex than symmetric encrpyption, but I can't find the numbers...
Started by stevemac on
, 7 posts
by 7 people.
Answer Snippets (Read the full thread at stackoverflow):
Practical PKI-based encryption systems use asymmetric encryption to encrypt a symmetric key, and then symmetric encryption with that key to encrypt the data (having said that, someone over that of ....
Encryption key.
|
