Notices tagged with crypto

Hey Fediverse! I would like to create a little game with some mini-puzzles coming from the world of "hacking"/crypto. I would like it to be very simple so I thought of asking to decode a Morse code sentence, or decipher something encrypted with Cesar cipher (or even a simpler one).

Any other ideas? 😃
Thanks!
(Boosts appreciated, of course 🙏)
#puzzles #game #crypto

#crypto Les chiffrements par flot sont-ils toujours vraiment utilisés ?

Par exemple RC4 est exclus de TLS : https://tools.ietf.org/html/rfc7465 et WEP pour le WiFi n'est plus recommandé…

Merci :)

This weekend I prototyped an app I've been thinking about for a while. I was inspired by http://cryptorpg.com/ (Cryptomancer RPG).

It's an encrypted chat room with dice-rolling functionality, but the rolls are provably fair thanks to some fun #crypto.

It uses some APIs from the @cryptpad server so I didn't have to do all the low-level websocket stuff again.

I'll publish the source and deploy it somewhere as soon as I clean it up a bit and improve the UX. #tabletop ##ttrpg #dnd #privacy

ProtonMail now supports GPG keys using elliptic curve cryptography (Ed25519):

https://protonmail.com/blog/elliptic-curve-cryptography/

– you can add Ed25519 keys under "Settings" → "Keys" → "Add new key" → State-of-the-art
X25519 (Modern, fastest, secure)
– if there are old messages, don't delete your old keys since they are needed for decryption
– you can always create your GPG keys locally, using your terminal (see https://infosec-handbook.eu/terminal-tips/#gpg-gen)

#protonmail #ed25519 #ecc #gpg #infosec #security #cybersecurity #crypto

Downgrade attack on TLS 1.3 and vulnerabilities in major TLS libraries:

https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/february/downgrade-attack-on-tls-1.3-and-vulnerabilities-in-major-tls-libraries/

– the attack leverages a side-channel leak via cache access timings (in OpenSSL, Amazon s2n, MbedTLS, Apple CoreTLS, Mozilla NSS, WolfSSL, and GnuTLS)
– it affects all TLS versions, including TLS 1.3
– one requirement for the attack are RSA key exchanges

#tls #rsa #key #exchange #tls13 #downgrade #encryption #https #crypto #infosec #cybersecurity #security