Posts
Passwordless Authentication
Id like to introduce passwordless auth into my app and id like to get your thoughts on the approach. im aware this isnt a UX-related sub, but i think it factors in on the decision. In my app i have a need for a password. i can use it to …
Argon2ID parameters for the paranoid
Hello everybody I've created this protocol, which utilizes Socialist Millionaire Problem for authentication Now, in SMP, a user sets a question, and an answer. The answer is human-language, and most often weak. In my protocol, I calculate proof using Argon2Id with "extreme" parameters of 1 GB of memory, and 25 …
What are your stance on non-NIST standardized algorithms ?
Hi all, I want to ask the experts on here, what is your stance on algorithms not standardized / approved by NIST. For instance, chacha20poly1305, argon2id specifically. Obviously searching online deems them safe, and widely deployed. Even some winning awards, and some have papers analysing them. However, I am looking …
Quantum-safe scheme for perfect-forward-secrecy
Hi all, I have implemented this scheme as part of a protocol I am working on, looking to get some eyeballs & feedback on it. Assume Alice and Bob want to talk, Alice & Bob share public keys and send each other shared secret ciphertext, and establish a shared secret …
Nitrokey 3 MacOS
Hello everyone, Has someone used a Nitrokey 3 (PIV) to secure MacOS login and FileVault and wants to share his experience (and potential caveats)?
asking for the smallest ever guidances
**Hello everyone, I hope you’re all doing well.** I’m a future general engineering student who wants to dive deeply into cryptography because of my strong attachment to mathematics. However, I’m a bit confused about the best possible self-learning roadmap. Should I start with theoretical concepts in mathematics (such as combinatorics, …
Signal Protocol in Javascript
following a previous post i made about [looking for the signal protocol in javascript](https://www.reddit.com/r/crypto/comments/1mi4ooa/looking_for_the_signal_protocol_in_javascript/) IMPORTANT: My project is not professionally audited or production ready. the signal protocol in my project is entirely redundent. this approach is to investigate encryption redundency in my app. --- edit: - Demo: https://signal.positive-intentions.com - Github: …
Danish Presidency backs away from 'chat control'
Multi-Protocol Cascading Round-Robin Cipher
I've been exploring a cryptographic concept I can't find an existing name for, and I'd appreciate the community's insight. While I suspect it's overly redundant or computationally heavy, initial testing suggests performance isn't immediately crippling. I'm keen to know if I'm missing a fundamental security or design principle. # The …