April 2014
- MUST STAPLE and PKI.js
The other day I did a post on how to create a self-signed certificate using PKI.js in that sample we included a Basic Constraints extension but we could have also just as easily defined a custom or new certificate…
- Generating signed messages using CMS and PKI.js
One of the most common signature formats on the web is known as CMS SignedData, this is the signature format used in PDF files, CAdES, S/MIME and several other digital signature solutions.
- Frankencerts, new extensions and PKI.js
One of the things that we wanted you to be able to use the PKI.js libraries for is the X.509 Certificates, including those with new extensions (like testing for OCSP MUST Staple or for testing other certificate…
- Potential projects for PKI.JS
This is a list of potential projects that would benefit from PKI.js, can you think of any others that would be interesting?
- WebCrypto and PKI
Like it or not here it comes -- within the next few months WebCrypto will be supported in various degrees across all mainstream browsers. There are plenty of posts out there talking about the security concerns of…
- The bias of experience and ignorance of youth
It was really security (well pirate and BBS’s and IRC channels) that first got me seriously into computers. It was a place where I was surrounded with brilliant people and super interesting problems to explore. It did…
- Bitcoin Paper Wallets and Digital Backups
The folks working on Armory have done a wonderful job thinking about many of the risks associated with Bitcoin and Paper Wallets. The have even gone as far to consider the risks of a compromised printer with a feature…
- Keeping long-term passwords secured
We all know that passwords should be changed regularly to reduce the value to an attacker and that they should be stored in ways that they can not be easily compromised which is why generally people are encouraged not to…
- Protecting Bitcoin keys with hardware
One of the most important things you can do to keep your Bitcoin keys safe is to get them off of your general-purpose computer and onto a single use device that is designed to perform cryptography or Bitcoin operations.
- Keeping an eye on your Bitcoin keys
In the government, banking and certificate authority worlds important keys are generated and used within specialized cryptographic devices called Hardware Security Modules (HSMs) or their less powerful cousins smart…
- Insurance and Bitcoin
There are lots of ways we risk loosing our money one of the biggest is when the institutions we trust to keep those funds safe fail to do so.