24 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
0
votes
0
answers
43
views
TLS Key Schedule is failing via Server_Handshake_traffic_secret
I am making a minimal TLS 1.3/HTTPS server in Java using only Sockets.
I have already created a ClientHello parser and a ServerHello. When testing with OpenSSL the ServerHello is accepted, but when ...
0
votes
1
answer
263
views
Trying to link with mbedtls functions fails with Zephyr
I am building a Zephyr application to run on an NRF52840. I am trying to derive a session key with the following function :
int derive_session_key(const uint8_t *device_token_key, const uint8_t *...
0
votes
1
answer
127
views
How to specify desired HKDF output length with `crypto.subtle.deriveKey`
The web crypto API defines two different KDF utilities, namely deriveBits and deriveKey. While the former allows you to specify the desired output length (RFC 5869 calls this parameter L), the latter ...
0
votes
1
answer
363
views
How to decrypt MSAL auth artifact, encrypted with AES-GCM and a HKDF-derived the key?
I use @azure/msal-browser in my project.
Account information are stored in the local storage and they were exploitable until recently.
But it changed in their v4 release:
if you are using the ...
0
votes
0
answers
349
views
How to properly implement HKDF Expand with openssl EVP_KDF
I am trying to manually get around bitwarden's encryption, and getting wrong results from using openssl according to this page: https://wiki.openssl.org/index.php/EVP_Key_Derivation . I want to use ...
0
votes
1
answer
157
views
HKDF function in Python and NodeJS give different results, why?
While working on implementing encryption/decryption between a Python backend server and a NodeJS frontend, my decryption attempts on the frontend were failing. I noticed that HKDF result generated by ...
0
votes
1
answer
155
views
How to implement HKDF with CryptoJS?
I am trying to implement HKDF with CryptoJS. (It's not allowed to use native crypto in my case.) The output of my implementation is different from the output from CyberChef, so I think my ...
-1
votes
1
answer
279
views
Use HKDF in bouncy-castle FIPS
I need to be able to use HKDF algorithm on my input key in bouncy-castle FIPS library. In usual bouncy-castle library there is this straightforward way of doing this
HKDFBytesGenerator ...
0
votes
1
answer
338
views
openssl: EVP_PKEY_derive failure
I try to test the sample code from https://www.openssl.org/docs/man1.1.1/man3/EVP_PKEY_CTX_set1_hkdf_salt.html (with some modification). When I run it, the function call of EVP_PKEY_derive returns 0 ...
0
votes
1
answer
194
views
HKDFExpand in NodeJS
I try to implement HKDFExpand in NodeJS using crypto library
The goal is to decrypt encrypted bitwarden (password manager) password protected export in NodeJS.
I try to mimic the same behavior in ...
0
votes
1
answer
710
views
How to derive keys (HKDF) from two EC key pairs in Dart/Flutter?
I'm currently implementing ISO 18013-5 (mobile driving license) using Dart and Flutter (sorry, can't share the full specification document). Briefly, in order to prevent eavesdropping during a data ...
1
vote
1
answer
979
views
How to do a triple Diffie-Hellman(3 - DH) key agreement in Java using bouncy castle?
There are ample examples on how to do Diffie-Hellman key agreement to compute a shared secret. However, I could not find any example on how to do 3DH in java using bouncy castle(or any security ...
1
vote
0
answers
342
views
EVP_PKEY_CTX_new_id returns NULL openssl 1.1.1g
I am using openssl 1.1.1g to implement parts of the quic RFC.
I followed the suggestions in the following link
How to use OpenSSL 1.1.1 to implement HDF-Extract?
But the very first call (...
4
votes
2
answers
440
views
zero knowledge architecture
I would like to encrypt some user data with the zero-knowledge architecture. I reference the implementation of the bitwarden and don't understand some parts.
First, I would like to use the the argon2 ...
0
votes
1
answer
350
views
Compute ecies hkdf symetric key with pycryptodome
Context: i'm working on making a python version of paymentmethodtoken from the google tink library to work with gpay messages. For that i use only python and PyCryptodome.
With that said i'm currently ...