#aead

AWS Site-to-Site VPN 支援 AES-GCM 了

AWS 更新了 Site-to-Site VPN：「AWS Site-to-Site VPN now supports additional encryption, integrity and key exchange algorithms」。

這次更新支援了一些新的演算法，其中 AES-GCM 的部份看起來是這次這波最重要的：

Encryption: AES128-GCM-16, AES256-GCM-16. Integrity: SHA2-384, SHA2-512. Diffie-Hellman groups: 19, 20, 21.

傳統的方式是 encryption algorithm + hash algorithm 搭配，所以就會出現各種排列組合，而不同的方式在實做上很容易出現安全問題，也就是這篇在討論的：「Should we MAC-then-encrypt or…

IEEE P1735 漏洞，又是 Padding Oracle Attack…

在「IEEE P1735 Encryption Is Broken—Flaws Allow Intellectual Property Theft」這邊看到 US-CERT 發表的「IEEE P1735 implementations may have weak cryptographic protections」，裡面提到的主要漏洞： The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. 主要應該是第一包： CVE-2017-13091: improperly specified padding in CBC mode allows use of an EDA…

Pwncloud Dangerous Crypto Within the Owncloud Encryption Module

The Owncloud net utility has an encryption module. I first turned conscious of it when a press launch was printed promoting this encryption module containing this: Imagine you’re an IT group utilizing business normal AES 256 encryption keys. Shall we say that a vulnerability is discovered within the algorithm, and also you now want to enhance your general safety by switching over to RSA-2048, a…

> You’ve spent enough time here, at this carnival. It’s time to move on, but you don’t want to go hive and face the music yet. Even though simply leaving the carnival might be enough to start the cacophony, you hope Sonati actually heeded your request, and won’t follow you.

> So, after vigorously scraping the paint off of your cheeks, and taking enough showers that the smell of ‘lavender and white strawberry’ is embedded into your very being, as opposed to the blood the the carnival constantly stinks of, you leave, possibly your most uneventful exit of this place so far. Which is great, by your books.

> As such, you decide to go to the next best place. Or maybe a better place. Either way, you head to Adonis’s hive, constantly paranoid the entire way that Sonati was just going to pop out of your shadow.