VirtualTam's bookmarks

21. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean 2022-02-24

    tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

    [ permalink ]
22. PASETO - Platform-Agnostic SEcurity TOkens 2022-02-21

    tags: cryptography, network/http, security, security/authentication

    [ permalink ]

    • https://github.com/paragonie/paseto
    • https://github.com/paseto-standard/paseto-rfc
    • https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid
23. mkcert: A simple zero-config tool to make locally trusted development certificates with any names you'd like. 2021-12-26

    tags: cryptography/certificate, cryptography/certificate-authority, programming/go

    [ permalink ]

    • https://blog.filippo.io/mkcert-valid-https-certificates-for-localhost/
24. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch 2021-11-14

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/tcp, network/transport-layer-security, observability/elastic/elasticsearch

    [ permalink ]
25. How to Monitor Who’s Connected to Your WireGuard VPN | Pro Custodibus 2021-08-21

    tags: cryptography, framework/vue.js, network/ssh, network/vpn/wireguard, observability, programming/go, programming/javascript

    [ permalink ]

    • https://github.com/vx3r/wg-gen-web
    • https://github.com/jamescun/wg-api
    • https://git.zx2c4.com/wireguard-tools/about/src/man/wg.8
26. wireguard-vanity-address: generate Wireguard keypairs with a given prefix string 2021-08-21

    tags: command-line, cryptography, cryptography/elliptic-curve, network/vpn/wireguard

    [ permalink ]

    • https://www.reddit.com/r/bash/comments/bx9ctt/wireguard_vanity_key_generator_written_in_posix_sh/
27. Crypto Museum 2021-05-23

    tags: cryptography, device, history, museum, security

    [ permalink ]
28. Ok Google: please publish your DKIM secret keys – A Few Thoughts on Cryptographic Engineering 2021-01-31

    tags: cryptography, email, email/dkim

    [ permalink ]

    • https://www.wired.com/2012/10/dkim-vulnerability-widespread/
    • https://wikileaks.org/DKIM-Verification.html
    • https://github.com/associatedpress/verify-dkim
    • https://rya.nc/dkim-privates.html
29. Storing hashes: bcrypt, pbkdf2, sha256-crypt, sha512-crypt 2021-01-03

    tags: cryptography, cryptography/hash, cryptography/hash/bcrypt, cryptography/hash/pbkdf2, cryptography/hash/sha, security/password

    [ permalink ]

    • https://security.stackexchange.com/questions/4781/do-any-security-experts-recommend-bcrypt-for-password-storage
    • https://security.stackexchange.com/questions/17421/how-to-store-salt
    • https://codahale.com/how-to-safely-store-a-password/
    • https://security.stackexchange.com/questions/133239/what-is-the-specific-reason-to-prefer-bcrypt-or-pbkdf2-over-sha256-crypt-in-pass
    • https://security.stackexchange.com/questions/211/how-to-securely-hash-passwords/31846
30. X.509 v3 Certificates | Learn mTLS the Hard Way 2020-09-08

    tags: cryptography/certificate, cryptography/encryption, network/transport-layer-security, openssl, security

    [ permalink ]
31. CFSSL: Cloudflare's PKI and TLS toolkit 2020-02-05

    tags: cryptography, cryptography/certificate, cryptography/certificate-authority, security

    [ permalink ]

    • https://blog.cloudflare.com/introducing-cfssl/
32. CALOMEL - Open Source Research and Reference 2019-12-21

    tags: bsd, cryptography/encryption, email, linux, network, network/http, security, server, unix, web

    [ permalink ]
33. hashcat - advanced password recovery 2019-11-04

    tags: cryptography/encryption, cryptography/hash, security, security/password

    [ permalink ]

    • https://hashcat.net/wiki/
    • https://github.com/hashcat/hashcat
34. ssh_scan: A prototype SSH configuration and policy scanner 2019-10-24

    tags: cipher, cryptography/elliptic-curve, cryptography/rsa, mozilla, network/ssh, security

    [ permalink ]

    • https://mozilla.github.io/ssh_scan/
35. apt - Import the repository signing key behind a proxy - Ask Ubuntu 2019-10-16

    tags: cryptography/pgp, cryptography/pgp/gnupg, gpg, network/http, network/ldap, security

    [ permalink ]
36. ubuntu - Is it possible to use Ansible authorized_key exclusive with multiple keys? - Stack Overflow 2019-09-08

    tags: configuration-management/ansible, cryptography/public-key-infrastructure, network/ssh, security, security/authentication

    [ permalink ]

    • https://docs.ansible.com/ansible/latest/modules/authorized_key_module.html
    • https://github.com/ansible/ansible-modules-core/commit/6f6d7f5c18296e3fe84fa5aef674948753ff52ae
    • https://github.com/ansible/ansible/issues/11347
37. testssl.sh: Testing TLS/SSL encryption anywhere on any port 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/shell/bash, web

    [ permalink ]
38. ssllabs-scan: A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing. 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/go

    [ permalink ]
39. PGP Subkeys 2019-07-30

    tags: cryptography/pgp, cryptography/pgp/gnupg, team

    [ permalink ]

    • https://security.stackexchange.com/questions/76940/what-exactly-is-a-subkey
    • https://www.enigmail.net/forum/viewtopic.php?f=3&t=375
    • http://www.connexer.com/articles/openpgp-subkeys
    • https://security.stackexchange.com/questions/43590/pgp-why-have-separate-encryption-subkey
40. LDAPKeyserver - GnuPG wiki 2019-07-30

    tags: cryptography/pgp, cryptography/pgp/gnupg, network/ldap, self-hosting

    [ permalink ]