/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blog.intothesymmetry.com
Critical vulnerability in JSON Web Encryption (JWE) - RFC 7516
| | pentesterlab.com
Algorithm Confusion Attacks against JWT using ECDSA
3.5 parsecs away

Travel
| | In this blog post, we cover how to exploit algorithm confusion against JWT when elliptic curves are used (EC256, EC512).
| | www.jeremykun.com
Elliptic Curve Diffie-Hellman | Math Programming
3.0 parsecs away

Travel
| | So far in this series we've seen elliptic curves from many perspectives, including the elementary, algebraic, and programmatic ones. We implemented finite field arithmetic and connected it to our elliptic curve code. So we're in a perfect position to feast on the main course: how do we use elliptic curves to actually do cryptography? History As the reader has heard countless times in this series, an elliptic curve is a geometric object whose points have a surprising and well-defined notion of addition.
| | paragonie.com
No Way, JOSE! Javascript Object Signing and Encryption is a Bad Standard That Everyone Should Avoid - Paragon Initiative Ente...
2.5 parsecs away

Travel
| | JWT, JWE, JWS, etc. are terrible designs and need to be scrapped, not resuscitated.
| | www.mathieupassenaud.fr
Why you should (or must) use «Sign in with... » button
15.1 parsecs away

Travel
| [AI summary] The article argues for securing user accounts by minimizing the number of passwords stored and utilizing robust authentication protocols like OAuth, OpenID, and WebAuthn provided by major services, suggesting password managers and hardware keys as effective alternatives.