Record · corpus.blog/posts/01a0bb58-3742-720a-b1d7-7a6cc9a96c36

Top 10 Developer Crypto Mistakes

littlemaninmyhead.wordpress.com · published 22 April 2017

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at littlemaninmyhead.wordpress.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 40
Words captured: 3,014

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

http://stackoverflow.com/users/3823831/thegreatcontini?tab=answers

stackoverflow.com

https://www.veracode.com/blog/research/how-get-started-using-java-cryptography-securely

veracode.com

https://en.wikipedia.org/wiki/RSA_SecurID

en.wikipedia.org

https://fcw.com/Articles/2011/08/08/FEAT-APT-RSA-attack-anatomy-infograph.aspx

fcw.com

http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r4.pdf

nvlpubs.nist.gov

https://medium.com/on-docker/secrets-and-lie-abilities-the-state-of-modern-secret-management-2017-c82ec9136a3d

medium.com

https://msdn.microsoft.com/en-us/library/zhhddkxy.aspx

msdn.microsoft.com

https://www.hanselman.com/blog/BestPracticesForPrivateConfigDataAndConnectionStringsInConfigurationInASPNETAndAzure.aspx

hanselman.com

https://www.crypto101.io/Crypto101.pdf

crypto101.io

https://msdn.microsoft.com/en-us/library/system.security.cryptography.symmetricalgorithm.generateiv(v=vs.95

msdn.microsoft.com

https://blog.cryptographyengineering.com/2011/09/21/brief-diversion-beast-attack-on-tlsssl/

blog.cryptographyengineering.com

https://github.com/Apple-FOSS-Mirror/CommonCrypto/blob/master/CommonCrypto/CommonCryptor.h

github.com

http://stackoverflow.com/questions/1220751/how-to-choose-an-aes-encryption-mode-cbc-ecb-ctr-ocb-cfb/42658861

stackoverflow.com

https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation

en.wikipedia.org

https://en.wikipedia.org/wiki/The_GIMP

en.wikipedia.org

http://stackoverflow.com/questions/6258047/java-default-crypto-aes-behavior

stackoverflow.com

https://www.owasp.org/index.php/Codereview-Cryptography

owasp.org

https://www.owasp.org/index.php/Using_the_Java_Cryptographic_Extensions

owasp.org

https://adamcaudill.com/2016/05/23/when-hashing-isnt-hashing/

adamcaudill.com

https://www.troyhunt.com/our-password-hashing-has-no-clothes/

troyhunt.com

https://security.stackexchange.com/a/6415/78214

security.stackexchange.com

https://msdn.microsoft.com/en-us/library/system.security.cryptography.passwordderivebytes(v=vs.110

msdn.microsoft.com

http://docs.oracle.com/javase/1.5.0/docs/guide/security/jce/JCERefGuide.html

docs.oracle.com

https://security.stackexchange.com/users/655/thomas-pornin

security.stackexchange.com

http://merlot.usc.edu/csac-f06/papers/Wang05a.pdf

merlot.usc.edu

https://pdfs.semanticscholar.org/dbda/84f9d3e47d63f7d28482bf93170c4a85a398.pdf

pdfs.semanticscholar.org

http://gauss.ececs.uc.edu/Courses/c653/lectures/Hashing/sha1-crypto-auth-new-2-yao.pdf

gauss.ececs.uc.edu

https://shattered.io/

shattered.io

https://blog.chromium.org/2014/09/gradually-sunsetting-sha-1.htmlit

blog.chromium.org

https://github.com/brix/crypto-js

github.com

http://stackoverflow.com/a/36780727/3823831

stackoverflow.com

http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/comments/800-38_Series-Drafts/GCM/Joux_comments.pdf

csrc.nist.gov

https://blogs.msdn.microsoft.com/shawnfa/2009/03/17/authenticated-symmetric-encryption-in-net/

blogs.msdn.microsoft.com

http://www.bouncycastle.org/specifications.html

bouncycastle.org

https://www.reddit.com/r/crypto/comments/677gpa/top_10_developer_crypto_mistakes/

reddit.com

https://freedom-to-tinker.com/2015/10/14/how-is-nsa-breaking-so-much-crypto/

freedom-to-tinker.com

https://www.keylength.com/

keylength.com

https://cryptosense.com/

cryptosense.com

https://superuser.com/a/742120/588035

superuser.com

http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf

cs.utexas.edu