Strong Crypto

2007-03-27T23:48:00.000+09:00

300 - Movie Trailer

aSSL - Ajax Secure Service Layer

2006-12-19T10:52:00.000+09:00

"aSSL is a library distributed under MIT License thats implements a technology similar to SSL without HTTPS.
aSSL is composed from a file .js and a server component. Currently, the ASP and PHP components are ready...
aSSL enables the client to negotiate a secret random 128-bit key with the server using the RC4 algorithm. Once be connection has been established, the data will be sent and received using BlockTEA algorithm (a derivation of DES). aSSL 1.0 uses a 64-bit key. Version 1.1 uses a 128-bit key with a technique similar to Double Key Triple DES, that I call Double Key Quadruple DES. This allows a level of security closer to AES encryption. In fact, aSSL is moving towards AES."

2006-12-12T02:14:00.000+09:00

Lost Loyalty

Very good match between music and scenes. My favourite music video.

Encrypted Notebook Drive

2006-10-31T15:01:00.000+09:00

Seagate Unveils Encrypted Notebook Drive - Sometime in the first quarter of 2007, Seagate will deliver the Momentus 5400 FDE.2, (Full Disk Encryption 2) a 2.5-inch drive with hardware-based, full disk encryption. All cryptographic operations and access control are performed by a separate chip within the drive. Only a password is necessary to authenticate for drive access.

2006-08-04T10:47:00.000+09:00

Commercial: Mountain Dew - Master

ROFL :)

Crazy Bike

2006-07-24T15:29:00.000+09:00


Google video, year 2000 or 2001 in Wuerzburg, Germany. P.S. music by Vanessa Mae

2006-07-05T15:23:00.000+09:00

SQL Injection

Encrypted emails with Gmail

2006-05-31T12:35:00.000+09:00

So, you like using Gmail, but don't want other people to be able to read your email? You are probably not alone and that is where the Gmail Encryption extension (Greasemonkey script) enters the picture.

Wireless security

2006-04-25T10:19:00.000+09:00

The Unofficial 802.11 Security Web Page : Lots of people are interested in wireless LAN security nowadays. Given that level of interest, there's a need for accurate information on how the current standards work, what's wrong with them, and the current thinking on how to fix the problems. This page tries to gather relevant papers and standards in a single place.

Some documents

2006-03-09T10:15:00.000+09:00

Protecting web users from phishing, spoofing and malware

Hamachi P2P VPN NAT-friendly protocol details

Star Wars meets Cops

2006-02-17T14:40:00.000+09:00

Via Betapundit: Troops - ROFL. Funny, but very well done video, mixing "Star Wars" with "Cops". Must see ;)

Bio Diesel

2006-02-02T12:00:00.000+09:00

Via Toni on WordPress:

Does Windows Patch Without Permission?

2006-01-10T10:53:00.000+09:00

via trimMail's Email Battles:
Microsoft's relatively quick response to the WMF fiasco may have been a bit too quick...After Zakharov's comment, one of our techs concurred. He noticed that one of our XP laptops that was set to simply download updates had restarted... And had the patch.
There is not such place like 127.0.0.1 ;)

Anonymous Internet Annoying Is Illegal in the U.S.

2006-01-10T10:46:00.000+09:00

via Schneier on Security:
Last Thursday, President Bush signed into law a prohibition on posting annoying Web messages or sending annoying e-mail messages without disclosing your true identity...Buried deep in the new law is Sec. 113, an innocuously titled bit called "Preventing Cyberstalking."

Inside NetBSD's CGD

2005-12-23T00:32:00.000+09:00

Via OnLAMP:
...CGD (PDF) is an encrypted pseudo disk driver. It sits on top of another disk or partition and presents a new virtual disk to the rest of the operating system. Each disk write (read) to the pseudo disk is encrypted (decrypted) and then performed on the underlying disk. The new disk can then be partitioned and used for any purpose that a normal disk can. This is the same approach as used by many software RAID solutions...

Boys and girls

2005-12-08T11:27:00.000+09:00

- Hot Chicks with....Network Equipment
- russian climbing -- Yamakashi :)

Google and Privacy

2005-12-01T13:21:00.000+09:00

Interesting post in Bruce Schneier's Blog - Google and Privacy . How much we can trust Google?

...This is an interesting fact -- Google keeps records of every search in a way that can be traceable to individuals...

An Overview of Cryptography

2005-11-15T16:40:00.000+09:00

An Overview of Cryptography -- This paper has two major purposes. The first is to define some of the terms and concepts behind basic cryptographic methods, and to offer a way to compare the myriad cryptographic schemes in use today. The second is to provide some real examples of cryptography in use today.

RainbowCrack-Online

2005-11-10T11:36:00.000+09:00

Pay per crack service.
The RainbowCrack-Online site allows anyone to pay a subscription fee and submit password hashes for cracking. Uses vast dictionaries of data, RainbowCrack Application, along with 200 servers.
See also: Gold at the end of rainbow cracking?

True Crypt

2005-11-07T14:18:00.000+09:00

True Crypt -- Free open-source disk encryption software for Windows XP/2000/2003 and Linux

It can create a virtual encrypted disk within a file and mount it as a real disk.

It can encrypt an entire hard disk partition or a device, such as USB memory stick, floppy disk, etc.

hidden volume; Encryption algorithms: AES-256, Blowfish (448-bit key), CAST5, Serpent (256-bit key), Triple DES, and Twofish (256-bit key). Supports cascading (e.g., AES-Twofish-Serpent).

IE eates babes hahaha

2005-11-05T23:38:00.000+09:00

Sony malware

2005-11-01T12:18:00.000+09:00

Sony, Rootkits and Digital Rights Management Gone Too Far. What to expect next? Worms? "Your TiVo is infected by DRM copyright worm" hahahaha, but not so funny :(

EzCrypto

2005-10-31T15:55:00.000+09:00

EzCrypto is an easy to use wrapper around the poorly documented OpenSSL ruby library.

Features:

Defaults to AES 128 CBC

Will use the systems OpenSSL library for transparent hardware crypto support

Single class object oriented access to most commonly used features

Ruby like

Examples:


# create key
@key=EzCrypto::Key.with_password "password", "system salt"
# encrypt simple text
@encrypted=@key.encrypt "Top secret should not be revealed"
# decrypt
@key.decrypt @encrypted

# 1. Regular raw use
@encrypted=@key.encrypt("clear text")
@decrypted=@key.decrypt(@encrypted)
assert "clear text", @decrypted

# 2. Base64 encoded use
@encrypted=@key.encrypt64("clear text")
@decrypted=@key.decrypt64(@encrypted)
assert "clear text", @decrypted

YoDance

2005-10-28T10:24:00.000+09:00

A cool clip of Yoda dancing hip-hop . Enjoy.

OpenPGP:SDK

2005-10-26T16:50:00.000+09:00

At EuroOSCon, Rachel Willmer and Ben Laurie announced OpenPGP:SDK, a BSD-licensed C library implementing the OpenPGP standard. The SDK is sponsored by Nominet.
In general the whole Ben Laurie's blog is quite impresive.

Dragostea Din Tei Improved

2005-10-25T11:36:00.000+09:00

The new "idol" :) Before sometime I had also a link to "New Eminem" clip, but for bad luck I lost it :(

Privacy Guru Locks Down VOIP

2005-08-09T17:14:00.000+09:00

Phil Zimmermann, creator of the wildly popular Pretty Good Privacy e-mail encryption program, is debuting his new project, which he hopes will do for internet phone calls what PGP did for e-mail.

Zimmermann has developed a prototype program for encrypting voice over internet protocol, or VOIP, which he will announce at the BlackHat security conference in Las Vegas this week.

I2P 0.6 Released

2005-08-09T16:12:00.000+09:00

I2P is an anonymous p2p network layer capable of running anonyizing internet services that run over it (IRC, FTP, NNTP, HTTP, BitTorrent and even games like FreeCiv). I2P functionality is currently apart of the Azureus 2.3.0.0 core. A variety of applications are being or have been developed for I2P including distributed content stores, searchable p2p, anonymous BitTorrent clients, anonymous newsgroup servers and more.

Rijndael in JavaScript

2005-08-09T16:10:00.000+09:00

Implementation of Rijndael in JavaScript. Think: AJAX, encryption on the client side, no plain text passwords going to the server.

Strongspace

2005-08-08T19:13:00.000+09:00

Strongspace is a secure place to gather, store, back-up and share any type of file with your co-workers, friends and family. You can upload, download and manage your files over SFTP (Secure File Transfer Protocol), HTTPS (web browser access over Secure Socket Layers) and even RSYNC over SSH (a rapid, low bandwidth way to "sync").

Fast AES C implementation

2005-07-09T22:11:00.000+09:00

Brian Gladman's AES code is the fastest free version I know of, is widely used, and has a BSD-like license.

Encryption and Security-related Resources

2005-07-09T16:37:00.000+09:00

Real-World Cryptography Problems

2005-07-08T18:38:00.000+09:00

Interesting thread in sci.crypt: list of several crypto problems which need research and some proposed solutions.

Homeland Security

2005-07-07T17:09:00.000+09:00

Protecting Files at Home Using Encrypted Containers - Many people encrypt partitions or drives to keep data safe, but if you're looking for something a little simpler but still safe, try using containers.

sHype for Xen

2005-06-21T21:15:00.000+09:00

Security architecture for hypervisors (sHype), integrated into Xen - IBM's TJ Watson Research Center has designed and developed a security architecture for hypervisors (called sHype). sHype is based on mandatory access controls (MAC). It allows Xen to use access rules (formal policy) to control both the sharing of virtual resources as well as the information flow between domains. It is modeled after the Flask security architecture as implemented in SELinux.

Intel Quietly Adds DRM to CPUs

2005-06-13T16:07:00.000+09:00

Intel Quietly Adds DRM to CPUs - interesting note on Bruce Schneier's blog. Keywords for Google: LaGrande, Active Management Technology, privacy related examples.And some questions for home work:

Apple switching to Intel

Apple Japan will open Music Store

Acrypto - asynchronous crypto layer for linux kernel 2.6

2005-03-14T14:15:00.000+09:00

Asynchronous crypto layer for Linux kernel 2.6 supports following features:

multiple asynchronous crypto device queues

crypto session routing

crypto session binding

modular load balancing

crypto session batching genetically implemented by design

crypto session priority

different kinds of crypto operation(RNG, asymmetrical crypto, HMAC and any other)

HIFN, VIA, FCRYPT drivers created for acrypto at
http://tservice.net.ru/~s0mbre/archive/acrypto/drivers/

Basic Cryptanalisis

2005-01-31T15:16:00.000+09:00

Basic Cryptanalisis -- pdf and ps, monographic and polygraphic substitution systems, transposition systems, word and pattern tables etc.

Famous Unsolved Codes and Ciphers

2005-01-24T16:17:00.000+09:00

Elonka's List of Famous Unsolved Codes and Ciphers is an unofficial list of well-known unsolved codes and ciphers. A couple of the better-known unsolved ancient historical scripts are also thrown in, since they tend to come up during any discussion of unsolved codes. There has also been an attempt to sort this list by "fame", as defined by a loose formula involving the number of times that a particular cipher has been written about, and/or how many hits it pulls up on a moderately-sorted web search.

New Global Directory of OpenPGP Keys

2004-12-24T23:18:00.000+09:00

The PGP Global Directory is a free, publicly available keyserver hosted by PGP Corporation that lets PGP users find the public keys of other PGP users with whom they want to exchange secure messages. It provides quick and easy access to the universe of PGP keys.

RC4 implementation for AMD64

2004-11-24T16:19:00.000+09:00

rc4-amd64 -- RC4 implementation for AMD64. On Opteron 244 1.8 GHz (64-bit):

Current state in OpenSSL - 135 MB/s Throughput

New Implementation: - 319 MB/s Throughput

What is encryption?

2004-11-17T14:22:00.000+09:00

Techword.com: What is encryption? -- What's the difference between a cipher and a code? Encryption schemes explained.

Identification and Authentication in NetWare 4

2004-11-05T16:25:00.000+09:00

I like Novell and NetWare. Solid, secure OS. Pretty popular in Europe and almost unknown in Japan :/
Understanding the Role of Identification and Authentication in NetWare 4

JavaScript Crypto

2004-10-26T22:26:00.000+09:00

JavaScript MD4, MD5 and SHA-1 implementations by Paul Johnston.

Emergent Chaos

2004-10-20T17:27:00.000+09:00

Found a new cryptography related blog: Emergent Chaos -- Musings from Adam Shostack on security, privacy, and economics

Handbook of Applied Cryptography

2004-10-15T16:36:00.000+09:00

Handbook of Applied Cryptography -- all chapters ara available for free in PS and PDF format.

Analysis of the WinZip encryption method

2004-10-12T16:28:00.000+09:00

Attacking and repairing the WinZip "Advanced Encryption" scheme -- ...We exhibit several attacks against WinZip's new encryption method, dubbed "AE-2" or "Advanced Encryption, version two." We then discuss secure alternatives....

VPNs and Public Key Infrastructure

2004-10-10T16:24:00.000+09:00

VPNs and Public Key Infrastructure -- article focuses on VPN tunneling, also summarize the set of technologies that form a Public Key Infrastructure (PKI)

Deploying a VPN with PKI -- tutorial implements a certificate-based security infrastructure using OpenSSL and uses this to secure both OpenVPN client and server endpoints

AES Animation

2004-10-07T16:31:00.000+09:00

AES Flash Animation

Bruce Schneier's Weblog

2004-10-07T16:29:00.000+09:00

Schneier on Security - A weblog covering security and security technology.. Who is Bruce Schneier? Just some keywords: Crypto-Gram, "Applied Cryptography", "Secrets & Lies" ;)

Tor

2004-10-06T18:32:00.000+09:00

Tor: an anonymizing overlay network for TCP -- a connection-based low-latency anonymous communication system that protects TCP streams: web browsing, instant messaging, irc, ssh, etc.. They have a new version release - tor-0.0.8.tar.gz.

New identity and access management site

2004-10-06T16:31:00.000+09:00

Credentica provides software solutions for enterprises with evolving identity and access management (I&AM) needs within or across autonomous organizational domains.. See also: "Rethinking Public Key Infrastructures and Digital Certificates; Building in Privacy" -- Dr. Stefan Brands' online book on his credential/ecash technology.

Quantum Cryptography Links

2004-10-01T16:35:00.000+09:00

Quantum Cryptography: Privacy Through Uncertainty: ... The genius of quantum cryptography is that it solves the problem of key distribution. A user can suggest a key by sending a series of photons with random polarizations...

NEC Realizes World's Fastest Quantum Cryptography Key Generation Rate: National Institute of Information and Communications Technology ("NiCT"), and Japan Science and Technology Agency ("JST") have jointly succeeded in realizing the world's fastest 100 kbps 40-km-long quantum cryptography key generation, far surpassing previous records...

Secure Authentication and Authorization over the Internet

2004-09-07T16:38:00.000+09:00

PGP Identity Management: Secure Authentication and Authorization over the Internet --

It has become clear that the use of passwords is not scalable or secure enough for access to computer services. As an alternative, this paper discusses ways to implement federated identity management using strong cryptography and the same PGP key infrastructure that is widely deployed on the Internet today