Reputation
Top tag
Next privilege 250 Rep.
View close votes
Badges
1 5
Impact
~6k people reached

  • 0 posts edited
  • 0 helpful flags
  • 13 votes cast
Apr
15
comment How should I check the received ephemeral Diffie-Hellman public keys?
@geertj: OpenSSL doesn't always generate safe primes, openssl dhparam -dsaparam 2048 will generate prime as described in SP800-56
Feb
29
comment Is it possible to obtain AES-128 key from a known ciphertext-plaintext pair?
milliard is unambiguous :)
Aug
8
comment Secure private key storage
Any code showing how to create RFC 5958 key file in java?
Aug
8
comment Secure private key storage
@mikeazo: Yes, but not in a straightforward way, the -aes256 options refer to PEM output used when extracting private keys. To actually create PKCS12 file with AES encryption one needs to use something like this: openssl pkcs12 -export -inkey server.key -keypbe AES-128-CBC -macalg SHA256 -in server.crt -out server.p12. But I have no way to verify if it actually does this... Still, I don't think it's possible to create such a file with JCE (Java Cryptographic Extensions), maybe with Bouncy Castle low level API...