User Steffen Ullrich

16 votes

Accepted

Why is PerfectForwardSecrecy considered OK, when it has same defects as salt-less password hashing?

answered May 9, 2019 at 13:40

12 votes

For a hashing function like MD5, how similar can two plaintext strings be and still generate the same hash?

answered Jul 9, 2019 at 4:58

8 votes

Accepted

Are TLS 1.2 AES-CBC and AES-GCM Authenticated Encryption ciphersuites?

answered May 20, 2018 at 14:01

7 votes

PKPA to Supercede TLS/AES etc?

answered Dec 6, 2016 at 3:28

7 votes

Accepted

ECC certificate works with all browsers and ssl labs- but not chrome

answered Apr 19, 2017 at 18:35

6 votes

Accepted

Is more ECDHE or RSA currently recommended?

answered Jan 2, 2020 at 18:43

5 votes

Can one passively load-balance HTTPS traffic based on TLS SNI?

answered Jan 31, 2016 at 22:22

5 votes

Accepted

What should be broken to break a cipher with perfect forward secrecy?

answered Apr 18, 2018 at 21:16

5 votes

What key is used to encrypt the certificate and certificate verify message in TLS1.3?

answered Apr 12, 2019 at 21:50

4 votes

How will be cipher selected when client is running on version TLS 1.3 and server is running on TLS 1.2?

answered Apr 21, 2019 at 15:58

3 votes

Use of extra AES on top of SSL protocol

answered May 2, 2017 at 11:02

3 votes

Accepted

What is the Peer Signing digest on an OpenSSL s_client connection?

answered Feb 23, 2018 at 17:46

3 votes

Does adding more letters provide added security compared to a standard substitution cipher?

answered Sep 25, 2019 at 3:16

3 votes

Accepted

How does TLS 1.3 provide authentication without using the public key to verify that the server has a private key?

answered Nov 7, 2022 at 16:44

2 votes

How does the TLS Client Hello message choose the TLS version?

answered Jan 15, 2021 at 20:09

2 votes

Akamai's Legacy SSL/TLS Cipher Profiles

answered Nov 25, 2016 at 18:14

2 votes

Is encrypted e-mail sent over TLS 1.3 a form of "forward secrecy" (similar to something like Signal)?

answered Oct 13, 2019 at 21:25

2 votes

How to check that you got the right key when brute forcing an encryption?

answered Feb 28, 2016 at 18:31

2 votes

Accepted

Why has SSL v3 not yet been upgraded to a higher version with stronger principles, what are the dependencies and issues to do so?

answered Nov 12, 2014 at 5:49

2 votes

Accepted

Strength of TLS handshake

answered May 19, 2015 at 7:48

2 votes

What is a size of mac_length and mac_key_length for TLS cipher suites HMAC using SHA384 and SHA512?

answered May 10, 2018 at 6:54

2 votes

Does the server signs message body after ssl handshake?

answered Jun 23, 2018 at 15:14

1 vote

Accepted

Is it necessary to have a certificate when we use TLS

answered Sep 28, 2019 at 14:40

1 vote

Can TLS session resumption work after client dropped connection & reconnected to server?

answered Apr 22, 2016 at 4:37

1 vote

Why is the server's public key always used in SSL encryption and never the client's public key?

answered Apr 5, 2020 at 20:17

1 vote

Chrome TLS 1.3 no TLS resumption with not secure connections

answered Apr 29, 2020 at 20:10

0 votes

Accepted

OpenSSL cipher suite support / key requirement for ecdhe_ecdsa_with_aes128_cbc_sha256

answered Sep 22, 2020 at 14:10

0 votes

How does the birthday paradox apply to random keys?

answered Aug 20, 2015 at 20:41

Stack Exchange Network

28 Answers

Why is PerfectForwardSecrecy considered OK, when it has same defects as salt-less password hashing?

For a hashing function like MD5, how similar can two plaintext strings be and still generate the same hash?

Are TLS 1.2 AES-CBC and AES-GCM Authenticated Encryption ciphersuites?

PKPA to Supercede TLS/AES etc?

ECC certificate works with all browsers and ssl labs- but not chrome

Is more ECDHE or RSA currently recommended?

Can one passively load-balance HTTPS traffic based on TLS SNI?

What should be broken to break a cipher with perfect forward secrecy?

What key is used to encrypt the certificate and certificate verify message in TLS1.3?

How will be cipher selected when client is running on version TLS 1.3 and server is running on TLS 1.2?

Use of extra AES on top of SSL protocol

What is the Peer Signing digest on an OpenSSL s_client connection?

Does adding more letters provide added security compared to a standard substitution cipher?

How does TLS 1.3 provide authentication without using the public key to verify that the server has a private key?

How does the TLS Client Hello message choose the TLS version?

Akamai's Legacy SSL/TLS Cipher Profiles

Is encrypted e-mail sent over TLS 1.3 a form of "forward secrecy" (similar to something like Signal)?

How to check that you got the right key when brute forcing an encryption?

Why has SSL v3 not yet been upgraded to a higher version with stronger principles, what are the dependencies and issues to do so?

Strength of TLS handshake

What is a size of mac_length and mac_key_length for TLS cipher suites HMAC using SHA384 and SHA512?

Does the server signs message body after ssl handshake?

Is it necessary to have a certificate when we use TLS

Can TLS session resumption work after client dropped connection & reconnected to server?

Why is the server's public key always used in SSL encryption and never the client's public key?

Chrome TLS 1.3 no TLS resumption with not secure connections

OpenSSL cipher suite support / key requirement for ecdhe_ecdsa_with_aes128_cbc_sha256

How does the birthday paradox apply to random keys?