Cryptography provides security mechanisms that are based on algorithmic methods and not on policy enforcement. For questions on cryptographic mechanisms and their application the Cryptography SE resp. the Information Security SE are most likely more appropriate. Don't use this tag if your question ...

learn more… | top users | synonyms

1
vote
0answers
28 views

How can I get console ssh to NOT ask for my private key password every time? [duplicate]

I have a program required by work installed on a Debian Wheezy box. Previously I was using Mac OS X (switch details irrelevant). I have an SSH keypair at ~/.ssh/id_rsa{.pub}. That keypair has a ...
3
votes
1answer
122 views

md5deep utility giving wrong/different output!

md5deep utility gives different result when calculating hashes. I have used several online tools to calculate hash and they give same result but md5sum or md5deep program on linux gives different ...
1
vote
2answers
83 views

Strategies for userland file encryption without FDE

There are cryptography experts that are concerned over using Full Disk Encryption (FDE) on *nix platforms due to attack surface exposed due to reverse engineering of encryption algorithm when looking ...
1
vote
1answer
46 views

How does the authentication process with the salted hash in shadow work

Does the supplied password during login get converted to a salted hash and then compared to the one in /etc/shadow? /what if the user is in LDAP but not in the shadow file? Would it use kerberos?
1
vote
1answer
126 views

Why does PyCrypto require a C compiler?

Is there a python crypto library that does not rely on anything besides python? Or pre-complied bundles of PyCrypto for Linux?
3
votes
2answers
825 views

How to encyrpt a message using someone's SSL smime.p7s file

I need to send a private key file to someone (a trusted sysadmin) securely. I suggested a couple options, but he replied as follows: Hi, I don't have neither LastPass nor GnuPGP but I'm using ssl ...
3
votes
1answer
317 views

Asynchronous and parallel algorithms in the Linux kernel

In the Linux kernel configuration, I see these options: config CRYPTO_PCRYPT tristate "Parallel crypto engine" depends on SMP select PADATA select CRYPTO_MANAGER ...
1
vote
2answers
1k views

DNSCrypt, Unbound and DNSSEC

I would like to have an encrypted DNS queries + a DNS Cache + Domain Name System Security Extensions (DNSSEC) . I used this bash script to install DNSCrypt and I choosed to use dnscrypt.eu servers : ...
4
votes
1answer
265 views

Using kernel cryptographic functions

Is it possible to use kernel cryptographic functions in the userspace? Let's say, I don't have md5sum binary installed on my system, but my kernel has md5sum support. Can I use the kernel function ...
3
votes
1answer
209 views

generate Token for OAuth (Twitter)

I am writing a simple bash script to download stream from Twitter: curl -H "Authorization: ${TOKEN}" "$URL" and I am looking for a way to generate the $TOKEN. I have all the input necessary ...
3
votes
1answer
72 views

What is the correct partition type for a geli-crypted partition on FreeBSD?

I am currently in the process of setting up an encrypted homeserver with zfs and geli. However I am not sure what the correct partition type for geli-crypted filesystems are. Do I just take ...
1
vote
1answer
180 views

generate SCRAM-SHA-1 hash of a password

I am looking for a simple way (perhaps using openssl) to generate SCRAM-SHA-1 hash of a password for use for Prosody Jabber Server. The passwords on the server are stored in the following form: ...
2
votes
0answers
200 views

Linux cryptography with hidden hardware-stored key

I am running Linux on iMX233, an ARM CPU with hardware-accelerated AES engine. The AES key can be programmed permanently into the chip ROM (OTP). This key is not directly accessible by software. ...
4
votes
1answer
1k views

Cli verification of digitally signed email

I am Alice and I've received signed email from Bob. I use Web e-Mail client (e.g. GMail) and I see that one of attachements is smime.p7s. I've found option "show original message" and saved contents ...
5
votes
1answer
501 views

RIPEMD-160 file digest

How can I make a file digest under Linux with the RIPEMD-160 hash function, from the command line?
1
vote
2answers
184 views

PGP words of an RSA fingerprint

Is there a program that displays my SSH RSA key fingerprint 43:51:43:a1:b5:fc:8b:b7:0a:3a:a9:b1:0f:66:73:a8 as PGP words? Added on 16th October 2012: I decided to write my own code. I found ...
10
votes
1answer
633 views

Why aren't the Fedora GPG keys signed?

Fedora uses GPG-keys for signing RPM packages and ISO checksum files. They list the keys in use (including fingerprints) on a web page. The web page is delivered via https. For example the checksum ...
6
votes
3answers
2k views

How do I tell which GPG key an RPM package was signed with?

The cryptographic signature of an RPM can be verified with the rpm -K command. This returns a string containing gpg (or pgp) and ending in OK if the signature is in RPM's database and is valid. If ...
0
votes
1answer
317 views

nacl crypto installation on arch

I am trying to install nacl crypto on my system: % uname -a Linux (none) 2.6.39-ARCH #1 SMP PREEMPT Mon Jun 6 22:37:55 CEST 2011 x86_64 Intel(R) Core(TM) i5 CPU M 540 @ 2.53GHz GenuineIntel GNU/Linux ...
8
votes
3answers
21k views

How to encrypt messages/text with RSA? (using openssl?)

I'm Bob. I have Alice's public key. I want to send Alice an -> RSA <- encrypted message. How can I do it using the openssl command? The message is: Hi Alice! Please bring malacpörkölt for dinner! ...
7
votes
4answers
4k views

How can I get a base64 encoded shaX on the cli?

sha1sum outputs a hex encoded format of the actual sha. I would like to see a base64 encoded variant. possibly some command that outputs the binary version that I can pipe, like so: echo -n "message" ...
2
votes
1answer
736 views

How to restore GnuPG key after reinstall?

I know that GnuPG is all about security, thus it's not giving many chance of retrieve private keys (otherwise anyone could do it) but I've got a private key, and my own rev.asc file. I had to ...
7
votes
5answers
19k views

Program for decrypt linux shadow file

Is there any program or script available for decrypt Linux shadow file ?