cryptography

pyca/cryptography .. image:: https://img.shields.io/pypi/v/cryptography.svg :target: https://pypi.org/project/cryptography/ :alt: 最新バージョン .. image:: https://readthedocs.org/projects/cryptography/badge/?version=latest :target: https://cryptography.io :alt: 最新ドキュメント .. image::...

some-tweak-to-hide-jwt-payload-values

some-tweak-to-hide-jwt-payload-values a handful of tweaks and ideas to safeguard the JWT payload, making it futile to attempt decoding by constantly altering its value, ensuring the decoded output remains unintelligible while imposing minimal performance overhead. What is a JWT Token? A JSON Web...

VSHG

VSHG - 하드웨어 저항성 및 GnuPG 보안 강화 VSHG는 GnuPG의 표준 s2k 키 유도 함수에 메모리/하드웨어 저항성 강화를 제공하고 대칭 암호화를 위한 간소화된 인터페이스를 목표로 합니다. VSHG 소개 VSHG매우 안전한 해시 생성기는 GnuPGGnu Privacy Guard를 위한 독립형 애드온입니다. 쉘 스크립트로 작성되었으며 Unix/Linux 파일 시스템 및 명령어를 기반으로 설계되었습니다. VSHG는 비밀번호에 sha384 및 Argon2 해시 함수를 사용하고, 최종 암호화를 위해 AES-256-CFB ...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

CryptHook

CryptHook CryptHook は、既存のアプリケーションを対称ブロック暗号による暗号化で保護するためのモジュール式実装です。ネットワーク通信の基本システムコールである send/sendto と recv/recvfrom をフックすることで動作します。Crypthook は、これらのシステムコールに依存する既存のあらゆるアプリケーションで動作します。 Crypto CryptHook は、256 ビット鍵を使用した AES の GCM モードに依存しています。鍵は PBKDF2 を使用してパスフレーズから生成されます。IV...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

cryptovenom

CryptoVenom CryptoVenom: 암호학의 스위스 아미 나이프 CryptoVenom이란 무엇인가? CryptoVenom은 다양한 암호 시스템 및 암호 분석 방법을 하나로 모은 오픈소스 도구입니다. 여기에는 고전 알고리즘, 해시 알고리즘, 인코딩 알고리즘, 논리 게이트, 수학 함수, 현대 대칭 및 비대칭 암호화 등이 포함됩니다. CryptoVenom의 목적은 무엇인가? 암호 분석이나 암호 시스템의 사용 및 조작을 더 쉽게 만드는 것입니다. CTF 플레이어이거나 학습 목적으로 호기심 많은 학생이라면 이 도구가 바로 당신...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ALMALINUX9.2:CLSA-2023:1702495193)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2023:1702495193 advisory. - Issue summary: A bug has been identified in the processing of key and initialisation vector IV lengths. This can lead to potential truncati...

poc-cve-2016-10555

RS256비대칭 알고리즘을 HS256대칭으로 변경 - POC CVE-2016-10555 HS256 알고리즘은 비밀 키를 사용하여 각 메시지를 서명하고 검증합니다. RS256 알고리즘은 개인 키를 사용하여 메시지를 서명하고 공개 키를 인증에 사용합니다. 알고리즘을 RS256에서 HS256으로 변경하면, 백엔드 코드는 공개 키를 비밀 키로 사용하고 HS256 알고리즘을 사용하여 서명을 검증합니다. 감사합니다: https://www.youtube.com/c/FarahHawa...

AdvSim.Cryptography

AdvSim.Cryptography AdvSim.Cryptography NuGet には、再利用可能で、適切なデフォルト設定が施され、使いやすい暗号化ラッパー関数のセットが含まれています。詳細については、以下の各サブ見出しを参照してください。 対称暗号 鍵材料の生成 AES Triple DES RC4 RC2 マルチバイト XOR XTEA 非対称暗号 楕円曲線ディフィー・ヘルマン ECDH RSA Windows ローカル エントロピー生成 DPAPI ローカルマシン DPAPI 現在のユーザー その他 TOTP NuGet 互換性 AdvSim.Cryptography...

libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

libkcapi security, bug fix, and enhancement update

1.4.0-3.0.1 - Change distronameext in spec file to oracle 1.4.0-3 - Remove ansicprng test as new kernels don't support it Resolves: RHEL-242707 - Add tag processing in AEAD decryption without ciphertext Resolves: RHEL-242667 - CVE-2026-71226: Fix memory corruption via uncanceled AIO requests on...

OESA-2026-3575 libkcapi security update

The Linux kernel exports a Netlink interface of type AFALG to allow user space to utilize the kernel crypto API. libkcapi uses this Netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level Netlink interface handling. The library does not implement...

CVE-2026-59640

A flaw was found in Bouncy Castle for Java. A remote attacker can exploit an OpenPGP Open Pretty Good Privacy Cipher Feedback CFB quick-check oracle vulnerability. This oracle, active on symmetric and session-key paths, could allow an attacker to gain sensitive information by observing the result...

ALPINE-CVE-2026-71225

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

AZL-94655 CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

CVE-2026-71225

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

CVE-2026-71225

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...