SEARCH RESULTS
 
Showing 1-10 of 20 records
 
Expand article

Changing the SSL cipher order in Internet Explorer 7 on Windows Vista

2007-11-07 05:37:47 by Steve Riley in Steve Riley on Security
 
...AES for SSL has come up in the newsgroups and at some conferences. When IE makes an HTTPS connection to a web server, it offers a list of cipher supported cipher suites. The server then selects the first one from the list that it can match. The default order that IE follows is this TLS RSA WITH AES 128 CBC SHA TLS RSA WITH AES 256 CBC SHA TLS...
 
 
 
 
 
Expand article

America's Next Top Hash Function Begins

2008-11-20 02:00:00 by Bruce Schneier in Wired Security
 
...AES. NIST is doing the same thing for what it's calling SHA-3 (not, for some unexplained reason, the Advanced Hash Standard or AHS The deadline was October 31, and NIST received 64 submissions. This isn't surprising I predicted 80 as most of the 15 AES submitters were professors, whose students at the time have become professors themselves,...
 
 
 
 
 
Expand article

A cryptographic hash function reading guide

2007-11-23 16:01:18 by George Danezis in Light Blue Touchpaper
 
...AES competition and depressed by the prospect of not having to design another significant block cipher for the next few years The rest of us should expect the next four years to be filled with news, first about advances in the design, then advances in the attacks against Hash functions, as teams with candidate hash algorithms will bitterly...
 
 
 
 
 
Expand article

Mujahideen Secrets 2

2008-02-08 05:39:41 by schneier in Schneier on Security
 
...AES encryption supported in the original version No one has explained why a terrorist would use this instead of PGP -- perhaps they simply don't trust anything coming from a U.S. company. But honestly, this isn't a big deal at all: strong encryption software has been around for over fifteen years now, either cheap or free. And the NSA...
 
 
 
 
 
Expand article

The Skein Hash Function

2008-10-29 04:35:29 by schneier in Schneier on Security
 
...AES encryption algorithm had an attack on 6 of 10 rounds, for a safety factor of only 1.7. Additionally, Skein has a number of provably secure properties, greatly increasing confidence in the algorithm Skein is simple. Using only three primitive operations, the Skein compression function can be easily understood and remembered. The rest of...
 
 
 
 
 
Expand article

Indianapolis Power and Light customer data exposed for up to four years

The Article has images
2007-12-06 09:27:41 by Evan Francen in The Breach Blog
...AES Corporation Contractor/Consultant/Branch Indianapolis Power and Light (IPL Victims Residential IPL customers from 2003 to 2007 Number Affected 3,000 Types of Data Names, addresses and Social Security numbers Breach Description A recent security audit at Indianapolis Power and Light (IPL) identified certain files containing sensitive...
 
 
 
 
 
Expand article

Cracking passwords on a PlayStation

2007-12-03 16:37:00 by Keith Brown in Security Briefs
 
...AES key. Don't fool yourself - your keyspace is not 256 bits! If you used a 12 character password, it's only a 79-bit keyspace. And that's the best case, assuming you included numbers, punctuation characters, as well as upper and lower-case letters, and generated it from a good random source. If you only used numbers, you'd end up with a...
 
 
 
 
 
Expand article

Mujahideen Secrets 2 Encryption Tool Released

The Article has images
2008-01-21 15:37:17 by HASH0x8b0f9c4 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...AES finalist algorithms Symmetrical encryption keys along the 256-bit (Ultra Strong Symmetric Encryption Encryption keys for symmetric length of 2048-bit RSA (husband of a public key and private Pressure data ROM (the highest levels of pressure Keys and encryption algorithms changing technology ghost (Stealthy Cipher Automatic...
 
 
 
 
 
Expand article

The Doghouse: Drecom

2008-02-25 13:32:40 by schneier in Schneier on Security
 
They advertise 128-bit AES encryption, but they use XOR This is why evaluating security products is hard: the devil is in the details
 
 
 
 
 
Expand article

"Crawling" Toward SDL