Open in app
Sign inGet started
One of the Greatest Advancements in Cybersecurity — The Diffie Hellman Method

One of the Greatest Advancements in Cybersecurity — The Diffie Hellman Method

The Diffie-Hellman (DH) method is perhaps one of the greatest inventions in Cybersecurity and was created by Whitfield Diffie and Marty…
Go to the profile of Prof Bill Buchanan OBE
Prof Bill Buchanan OBE
The Magic of HKDF — At The Heart of Virtually Every Web Connection

The Magic of HKDF — At The Heart of Virtually Every Web Connection

Before I talk about HKDF (HMAC Key Derivation function), I would like to start with a disclaimer. In this article, we will use a…
Go to the profile of Prof Bill Buchanan OBE
Prof Bill Buchanan OBE
Mutual Authentication With Public Key Encryption and Additional Data

Mutual Authentication With Public Key Encryption and Additional Data

The ECDH method that we use for key exchange on the Web is open to an Eve-in-the-Middle attack. For this, we add a digital signature with…
Go to the profile of Prof Bill Buchanan OBE
Prof Bill Buchanan OBE
When Bob and Alice Have a Secret … They Can Generate Another Secret: Meet J-PAKE

When Bob and Alice Have a Secret … They Can Generate Another Secret: Meet J-PAKE

J-PAKE (Password Authenticated Key Exchange by Juggling) was created by Hao and Ryan [1] and fully defined in RFC 8238 [2]. It is a…
Go to the profile of Prof Bill Buchanan OBE
Prof Bill Buchanan OBE
Secure Remote Password 6a (SRP6a)

Secure Remote Password 6a (SRP6a)

The storing of passwords is an obvious attack point on any system. The method to store these, such as with a hash of the password, is often…
Go to the profile of Prof Bill Buchanan OBE
Prof Bill Buchanan OBE
Can I Recover A Message From My Signature?

Can I Recover A Message From My Signature?

Wouldn’t it be amazing if I could sign my name on a message, and where my signature contains the details of the message? Someone could then…
Go to the profile of Prof Bill Buchanan OBE
Prof Bill Buchanan OBE
The Roots of ECDSA … Meet DSA

The Roots of ECDSA … Meet DSA

The Digital Signature Algorithm (DSA) is a standard defined in the Federal Information Processing Standard (FIPS 186) for digital…
Go to the profile of Prof Bill Buchanan OBE
Prof Bill Buchanan OBE
About ASecuritySite: When Bob Met AliceLatest StoriesArchiveAbout MediumTermsPrivacyTeams