Archives for Software Dev - Page 2
AES ciphertext length close to plaintext length – leakage
AES Ciphertext Length Leakage Does AES Ciphertext Length Leak Information? 1️⃣ What Can Be Leaked Even though AES encryption is strong, some metadata can still be inferred from ciphertext: Length…
AES 256 Ciphertext Length versus Input String length
AES Ciphertext Length Explanation AES Ciphertext Length Explained 1️⃣ AES Block Size AES always operates on 128-bit blocks (16 bytes). The key size (128/192/256 bits) does not affect the block…
JSON payload – security checklist
JSON Security Checklist 1. Input Validation Validate JSON structure: Use strict schemas (JSON Schema, OpenAPI, protobuf). Reject unknown fields. Enforce types: Ensure all fields match expected types; avoid implicit type…
Multisig Inheritance Plan
multisig inheritance 2-of-3 Multisig Inheritance Plan — Diagram & Full Guide This HTML document contains a complete explanation (from earlier responses) plus a clear diagram illustrating a 2-of-3 multisig…
Copying formula values in Excel
How to copy cells that contain formulas (Excel) Below are concise options depending on whether you want to copy formulas as formulas, copy the literal formula text, or paste…
Second Factor Options – Google Auth, Yubi Keys, Security Questions…
Second Factor in MFA: YubiKeys vs Security Questions vs SMS Texts vs TOTP Apps 1) YubiKeys (Hardware Security Keys — FIDO2/U2F) Strongest protection: public-key crypto; resistant to phishing, SIM-swaps,…
Blocking or Allowing entire countries in Cloudflare
Blocking Entire Countries with Cloudflare Geoblocking (Step-by-Step Guide) Blocking Entire Countries with Cloudflare Geoblocking Yes—Cloudflare can block (or challenge) all traffic from a selected country. Here’s how to do it…
Locking down UAT Environments
Locking Down UAT Egress: What to Whitelist for External APIs When your UAT environment needs to call third-party APIs, give it only the network access it truly needs —…
Thales HSM – Key Concepts
Thales HSM – Key Concepts Applies to Luna, nShield, and Thales Data Protection on Demand (DPoD) 1) What an HSM Does Tamper-resistant hardware for generating, storing, and using cryptographic keys…
Decentralized CAs
Operating a Decentralized Certificate Authority with Tokenized Incentives A decentralized Certificate Authority (CA) eliminates reliance on a single central CA. Instead, certificate issuance and revocation are handled by a…