In this weeks episode we are lucky to be joined again by Scott Arciszewski.
We start off the show by discussing the difference between Symmetric and Asymmetric Encryption, what Authenticated Encryption is and how secret-keys are exchanged using Diffie-Hellman.
From here, we move on to highlight how Elliptic-curve cryptography works, what DNSCrypt is and why prime numbers are so important in cryptography.
Finally, we touch upon multi-factor authentication, how one time passwords work, SMS vulnerabilities and how to manage password recovery.
Show Links
Scott Arciszewski on TwitterYou Wouldn’t Base64 a Password - Cryptography Decoded - Paragon Initiative Enterprises BlogSealed boxes - libsodiumDiffie-Hellman Key Exchange - YouTubeThe Padding Oracle Attack - why crypto is terrifyingparagonie/EasyRSA - Simple and Secure Wrapper for phpseclibCan you explain Bleichenbacher’s CCA attack on PKCS#1 v1.5?ZF2015-10 - Potential Information Disclosure in Zend\Crypt\PublicKey\Rsa\PublicKeyWhy should I use Authenticated Encryption instead of just encryption? - Cryptography Stack Exchangedefuse/php-encryption - Simple Encryption in PHP.paragonie/paseto - Platform-Agnostic Security TokensTrapdoor functionsDiscrete Logarithm ProblemPractical Invalid Curve AttacksDNS Security with DNSCrypt - OpenDNSPublic key infrastructureHow I exploited ACME TLS-SNI-01 issuing Let’s Encrypt SSL-certs for any domain using shared hostingparagonie/multi_factor - Vendor-Agnostic Two-Factor AuthenticationSignal ProtocolSplit Tokens - Token-Based Authentication Protocols without Side-Channels - Paragon Initiative Enterprises Blogparagonie/gpg-mailer - GnuPG-encrypted emails made easyEmail Self-Defense - a guide to fighting surveillance with GnuPG encryption