The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
0answers
11 views

Deprecation of RSA-SHA-1 in DKIM keys?

I recently noticed that opendkim on my mail server is objecting to DKIM signatures from a client, saying their key is insecure. It may be that that's due to lack of secure DNS (confirmation?) but I ...
0
votes
0answers
11 views

IIS 8: to be sure about the right (default) cryptographic service provider

I'm in the process of creating a CSR, and when asked, I must choose the "Cryptographic service provider" (this is my first CSR, so bear with me for anything obvious). The already selected is ...
0
votes
0answers
114 views

Check for SSL Weak Ciphers SSL3_RSA_RC4_128_MD5, SSL3_RSA_RC4_128_SHA, TLS1_RSA_RC4_128_MD5, TLS1_RSA_RC4_128_SHA

I am getting a serve ready for PCI compliance, and have one area with crypto from apache with the following report: Weak ciphers offered by this service: SSL3_RSA_RC4_128_MD5 SSL3_RSA_RC4_128_SHA ...
0
votes
1answer
20 views

Can't build crc32c(a nodejs package)

It's not really nodejs related. It's a C implementation. Firstly, while building, it exits with error: "warning: linux/if_alg.h: No such file or directory". Then I run yum install ...
-3
votes
1answer
47 views

Is uploading your openssh public key to ~/.ssh/ for a given user safe?

I like to upload my public key (eg: ~/.ssh/id_rsa.pub) to various servers that I connect to on various networks for work. I use this same public key on github. If I am on a shared user account and I ...
0
votes
0answers
33 views

Packet captures of OSPFv2 with HMAC-SHA1 (RFC5709)

I'm looking to get my hands on packet captures showing a hello packet from OSPFv2 configured to use HMAC-SHA1 for authentication, or to find software that supports such a mode that I could use to ...
1
vote
1answer
62 views

Cisco ASA crypto keys, SSH, and VPN

I'm new to the ASA and wanted to know if regenerating crypto keys on an existing ASA with established VPN tunnels could negatively affect the tunnels. The reason for wanting to regenerate crypto keys ...
2
votes
1answer
58 views

Linux Kernel setup: is it good idea to enable everything in Cryptographic API?

There are several implementations for some algorithms, which use CPU instructions which may or may not be available on current system. Is it good idea to just enable (in kernel, not as modules) all of ...
3
votes
2answers
94 views

how is a website certificate file cryptographically readable by windows?

I have a .crt file signed by a CA. I cat the file to see that it is ascii text. Yet when I double click on the .crt file in windows, it opens it up and somehow displays all the information that's ...
4
votes
1answer
328 views

Logging SSL ciphersuite used in Windows Server 2008 R2

Is there a way to see /log which cipher suites are (actively) being used to establish SSL connections on Windows Server 2008 R2? Ideally on a per request basis, like an extra column in the IIS logs.
0
votes
0answers
119 views

mod_ssl and apache cipher suite client connections

Just starting out with managing an Apache server. Running into some issues while trying to integrate with a vendor API. I've verified all of the basic infrastructure issues (DNS, TCP ports, etc.) and ...
-3
votes
2answers
201 views

how to sign a binary in Linux? [closed]

I have a Linux device that needs to be able to perform a software update of some binaries that may be coming from an insecure source I'd like to find a way to sign these binaries using a ...
1
vote
1answer
135 views

Is there a way to see which groups/users have access to an RSA key container?

I used aspnet_regiis to create an RSA key container (machine container). I want to secure it and I know I can use the -pa and -pr commands to specify access. But is there a way to see which ...
1
vote
2answers
190 views

Https for embedded devices, local addresses

I am trying to add https to the embedded devices I am working on. These devices are generally assigned local ip addresses and so cannot get their own ssl certificates. So essentially my question is ...
2
votes
1answer
728 views

Strong Cryptography in Solaris Zone

I'm trying to setup a Kerberos KDC on a Solaris zone but ran into a bit of a problem with the Cryptographic Framework on Solaris 10 even though the packages for strong encryption (SUNWcry & ...
1
vote
2answers
394 views

virtual machines and cryptography

I suspect I'm a bit offtopic with the site mission, but it seems me more fitting for the question than stackoverflow i'm in preparing to create a vm with sensible data (personal use, it will be a ...
6
votes
1answer
684 views

md5sum returns a different hash value than online hash generators

On suse10 md5sum myname gives md5 hash as 49b0939cb2db9d21b038b7f7d453cd5d. The file myname contains string "ravi" while some of the online md5 hash generators for the same string seem to give a ...
8
votes
3answers
2k views

Entropy on virtual machines

As you might know that it's not as easy to generate entropy on a virtual machine as on a "normal" pc. Generating a gpg-key on a virtual machine can take a while, even with the correct tools. There ...
5
votes
3answers
255 views

PGP: on the web, what if everything was tampered?

I am trying to wrap my head around how Public Key Cryptography can really work in a secure manner. From what I can gather, you go to example.com and download their PGP/GPG Public Key and add it to ...
8
votes
4answers
4k views

Validating signature trust with gpg?

We would like to use gpg signatures to verify some aspects of our system configuration management tools. Additionally, we would like to use a "trust" model where individual sysadmin keys are signed ...
1
vote
1answer
428 views

apache2 SSL Diffie Hellman key sizes

How to make apache 2.2 in debian lenny use Diffie Hellman key exchange with keys larger than 1024bits? I found a patch that theoretically adds this ability at Apache bugzilla but can't find any ...
0
votes
1answer
718 views

Smartcard (USB Cryptostick) and Firefox

I am having a GPF-Cryptostick running on ubuntu 11.04 with firefox 5.0. Using a smartcard is such a great thing, but i did not found any good how-tos. Maybe it is just a lack of understanding. First: ...
4
votes
1answer
2k views

What kind of algorithm does .htpasswd uses?

I am trying to generate this kind of hashes programmatically: axF3s9cdEnsNP But I can't identify what kind of hash it is. The hash comes from a .htpasswd file. All the online htpasswd generators I ...
2
votes
2answers
89 views

ssl communication handshake question

During SSL communication, the server sends its certificate to the client for authentication. Optionally, the client could send its certificate too, for client authentication. My question is, does the ...
0
votes
1answer
419 views

What cryptographic accelerators are recommended for use with Linux in the enterprise?

I've been investigating hardware cryptographic accelerators, and have come up against a dizzying array of possibilities. There are boards that range from $20 to $10,000 - and CPUs that have ...
2
votes
3answers
1k views

How to make OpenVPN use VIA Padlock on OpenBSD?

I've bought a VIA based router for the only purpose to run OpenVPN on it. Unfortunately it seems that Padlock is not used. Here is the important part from dmesg: OpenBSD 4.8 (GENERIC) #136: Mon Aug ...
1
vote
2answers
438 views

Can I use the same password for TrueCrypt as what I used when creating my Public Key?

I created and published a Public Key using gpg. I am now creating a TrueCrypt volume and wish to use the same password. Does knowing my public key, in this instance, make my TrueCrypt volume become ...
1
vote
3answers
1k views

Creating a DSA Signature from the Linux command line

I'm looking for a Linux/Unix command-line tool to create a DSA signature from a given file/data and a private key I know about the xmlsec1 tool from: http://www.aleksey.com/xmlsec/ But I would like ...
1
vote
1answer
68 views

What DNSSec implementations are available, and have they been checked for padding Cryptographic Oracle vulnerabilities?

A cryptographic Oracle is where one can deduce the private key when a error condition is created. Considering the recent ASP.NET padding Oracle exploit, can anyone tell me if the DNSSec ...
1
vote
0answers
286 views

WebLogic 8.1 and 4096-bit SSL?

We have a scenario in which we'd like to configure a WebLogic 8.1 server (running on Windows, JRockit 1.4.2) to connect to Active Directory over SSL for authentication. Our Active Directory is ...
2
votes
2answers
98 views

Encrypt shared files on AD Domain

Can I encrypt shared files on windows server and allow only authenticated domain users have access to these files? The scenario as follows: I have a software development company, and I would like to ...
4
votes
2answers
409 views

Two SSL certificates with same key

If I generate two SSL certificates using the same key, am I diluting the strength of the certificates? (does it open the door for cryptanalysis or a possibility of compromising data across that ...
0
votes
2answers
504 views

Ubuntu - Is there any programme for MD5 rainbowtables on Ubuntu?

I've been reading about Rainbow Tables recently. There's a few webpages that will do a reverse look up for an MD5 hash. Is there any programme on Ubuntu that lets me do this? Is there something in ...
8
votes
4answers
931 views

Why does a SSH public key sit on the server and not with the client?

I don't quite understand the theory behind keeping public keys on the server. In the lockbox analogy of public/private keys, to unlock Alice's box, Alice holds the private key while the public key is ...
84
votes
6answers
26k views

SSH keypair generation: RSA or DSA?

SSH supports two signature algorithms for key pairs: RSA and DSA. Which is preferred, if any? For RSA, what is the minimum acceptable key length?