TrinityTonic

Frankfurt am Main, Deutschland

Jun
25
comment How long does an HTTPS symmetric key last
I do believe what you say, however is there a specific formula to be able to calculate the required renewal time depending on the key-size / block-size of the used cipher?
Apr
10
comment RiscV jumps (j, jal) to wrong address (off by offset 2)
It's the zero-riscy as found on github (github.com/pulp-platform/zero-riscy) without customizations in the riscv logic. GCC development tools are used (riscv-none-gcc).
Apr
9
asked RiscV jumps (j, jal) to wrong address (off by offset 2)
2018
Dec
22
awarded Yearling
Dec
22
awarded Yearling
Dec
22
awarded Tumbleweed
Dec
21
awarded Curious
Dec
11
awarded Constituent
Dec
7
awarded Caucus
Dec
7
revised RSA engine with inaccessible private keys - susceptible to any attacks?
added 11 characters in body
Dec
7
comment RSA engine with inaccessible private keys - susceptible to any attacks?
Thanks! Actually, it is used for signing some sort of chip identification data ;). Assuming that our product's gonna be in the market for ~20 years... what kind of RSA key would you suggest? I have the options from 512-bit to 4096-bit and would tend to 2k, 3k or 4k.
Dec
6
asked RSA engine with inaccessible private keys - susceptible to any attacks?
Dec
4
awarded Editor
Nov
30
comment Why does validation fail when connecting to a server by IP address instead of hostname?
Is there any way to connect to a let's say private IP-address but tell the agent that connects to it that it expects the CN to be "someCNname.com"? Or is this agent dependent. I know that for mbedtls for example you can specify the server address (server_addr) as 192.168.210.5 for example, but if you also specify the server name (server_name) as "theservername.com" for example, the connection will succeed if the certificate's CN was "theservername.com".
Nov
29
asked What's the difference between Secure Boot and Attestation?
Sep
27
awarded Popular Question
Aug
9
revised TPM - Device Softwareupdate - What happens to my sealed key?
added 10 characters in body
Aug
8
comment TPM - Device Softwareupdate - What happens to my sealed key?
The problem is that in some cases I do not know that I will update the firmware. Imagine the software on the device is broken and doesn't even boot-up. How could I change the values in that case ... not possible. If I knew that I'd want to make a firmware update, I'd just migrate the key and then seal it to my new PCR values, the problem however is that I cannot be sure that my current firmware is still working.
Aug
8
comment TPM - Device Softwareupdate - What happens to my sealed key?
Code Signing and Secure Boot is included as well. But the problem is that I have a sealed key on the TPM which I want to be able to use after the complete update of the system (e.g. in case of a hard software failure).
Aug
8
asked TPM - Device Softwareupdate - What happens to my sealed key?
1 2 3 4 5