VirtualTam's bookmarks

21. OpenSSL Cookbook 2023-05-31

    tags: cryptography/certificate, network/http, network/transport-layer-security, openssl

    [ permalink ]

    The definitive guide to using the OpenSSL command line for configuration and testing.

    Topics covered in this book include:

    • key and certificate management,
    • server configuration,
    • a step by step guide to creating a private CA,
    • testing of online services.
22. Crypto Museum - Barbie Typewriter 2023-02-18

    tags: cryptography, museum

    [ permalink ]

    • https://www.youtube.com/watch?v=7Gwhx-uG5h8
23. Debugging Certificate Errors 2023-02-18

    tags: cryptography/certificate, curl, network/http, network/transport-layer-security, openssl

    [ permalink ]

    • https://www.netmeister.org/whatsthatcert/
24. badssl.com - Memorable site for testing clients against bad SSL configs 2023-02-18

    tags: cryptography/certificate, internet/browser/chrome, network/http, network/transport-layer-security

    [ permalink ]

    • https://github.com/chromium/badssl.com
25. The Rust Rand Book - Extended documentation for Rust's Random number library 2022-12-22

    tags: cryptography, cryptography/random, programming/rust

    [ permalink ]

    • https://github.com/rust-random/rand/
    • https://github.com/rust-random/book/
    • https://crates.io/crates/rand
26. Cloudflare Research | OPAQUE: An Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks 2022-07-12

    tags: cloud-computing/cloudflare, cryptography/encryption, security/authentication, security/password

    [ permalink ]

    • https://blog.cloudflare.com/opaque-oblivious-passwords/
    • OPAQUE: An Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks
    • https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-opaque
    • https://blog.cryptographyengineering.com/2018/10/19/lets-talk-about-pake/
27. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean 2022-02-24

    tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

    [ permalink ]
28. PASETO - Platform-Agnostic SEcurity TOkens 2022-02-21

    tags: cryptography, network/http, security, security/authentication

    [ permalink ]

    • https://github.com/paragonie/paseto
    • https://github.com/paseto-standard/paseto-rfc
    • https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid
29. mkcert: A simple zero-config tool to make locally trusted development certificates with any names you'd like. 2021-12-26

    tags: cryptography/certificate, cryptography/certificate-authority, programming/go

    [ permalink ]

    • https://blog.filippo.io/mkcert-valid-https-certificates-for-localhost/
30. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch 2021-11-14

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/tcp, network/transport-layer-security, observability/elastic/elasticsearch

    [ permalink ]
31. How to Monitor Who’s Connected to Your WireGuard VPN | Pro Custodibus 2021-08-21

    tags: cryptography, framework/vue.js, network/ssh, network/vpn/wireguard, observability, programming/go, programming/javascript

    [ permalink ]

    • https://github.com/vx3r/wg-gen-web
    • https://github.com/jamescun/wg-api
    • https://git.zx2c4.com/wireguard-tools/about/src/man/wg.8
32. wireguard-vanity-address: generate Wireguard keypairs with a given prefix string 2021-08-21

    tags: command-line, cryptography, cryptography/elliptic-curve, network/vpn/wireguard

    [ permalink ]

    • https://www.reddit.com/r/bash/comments/bx9ctt/wireguard_vanity_key_generator_written_in_posix_sh/
33. Crypto Museum 2021-05-23

    tags: cryptography, device, history, museum, security

    [ permalink ]
34. Ok Google: please publish your DKIM secret keys – A Few Thoughts on Cryptographic Engineering 2021-01-31

    tags: cryptography, email, email/dkim

    [ permalink ]

    • https://www.wired.com/2012/10/dkim-vulnerability-widespread/
    • https://wikileaks.org/DKIM-Verification.html
    • https://github.com/associatedpress/verify-dkim
    • https://rya.nc/dkim-privates.html
35. Storing hashes: bcrypt, pbkdf2, sha256-crypt, sha512-crypt 2021-01-03

    tags: cryptography, cryptography/hash, cryptography/hash/bcrypt, cryptography/hash/pbkdf2, cryptography/hash/sha, security/password

    [ permalink ]

    • https://security.stackexchange.com/questions/4781/do-any-security-experts-recommend-bcrypt-for-password-storage
    • https://security.stackexchange.com/questions/17421/how-to-store-salt
    • https://codahale.com/how-to-safely-store-a-password/
    • https://security.stackexchange.com/questions/133239/what-is-the-specific-reason-to-prefer-bcrypt-or-pbkdf2-over-sha256-crypt-in-pass
    • https://security.stackexchange.com/questions/211/how-to-securely-hash-passwords/31846
36. X.509 v3 Certificates | Learn mTLS the Hard Way 2020-09-08

    tags: cryptography/certificate, cryptography/encryption, network/transport-layer-security, openssl, security

    [ permalink ]
37. CFSSL: Cloudflare's PKI and TLS toolkit 2020-02-05

    tags: cloud-computing/cloudflare, cryptography, cryptography/certificate, cryptography/certificate-authority, security

    [ permalink ]

    • https://blog.cloudflare.com/introducing-cfssl/
38. CALOMEL - Open Source Research and Reference 2019-12-21

    tags: bsd, cryptography/encryption, email, linux, network, network/http, security, server, unix, web

    [ permalink ]
39. hashcat - advanced password recovery 2019-11-04

    tags: cryptography/encryption, cryptography/hash, security, security/password

    [ permalink ]

    • https://hashcat.net/wiki/
    • https://github.com/hashcat/hashcat
40. ssh_scan: A prototype SSH configuration and policy scanner 2019-10-24

    tags: cipher, cryptography/elliptic-curve, cryptography/rsa, mozilla, network/ssh, security

    [ permalink ]

    • https://mozilla.github.io/ssh_scan/